00000000000000000000000000000000000000000000000ff"]) (async, rerun: 32)
ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (rerun: 32)

08:21:28 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, 0x0, 0x6, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:28 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r1, 0x0, 0x7e00, 0x8})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r9}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

[ 1541.363173][T11577] loop2: detected capacity change from 0 to 16
[ 1541.405422][T11577] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:28 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, 0x0, 0x6, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x8}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:28 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="00003f004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:28 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:28 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2b20, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0x56, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0xfb, 0x23, 0xea3eba5455ee7e5, 0x3, "5ef70db6d000", "05bae33ce44841c72030edfaaf1f"}, 0x23, 0x3) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:28 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:28 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:28 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0xfeffffff00000000})

08:21:28 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="00003f004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="00003f004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:28 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1541.948143][T11613] loop2: detected capacity change from 0 to 16
08:21:28 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xff, 0x3f, 0x6e, 0x2, 0x3e, 0x7fff, 0xb5, 0x40, 0x36e, 0xfff, 0x685, 0x38, 0x1, 0xff80, 0x800, 0x400}, [{0x7, 0x1, 0x8000000000000001, 0x200, 0x7fffffff, 0xfff, 0x381, 0x7}, {0x6, 0x1f, 0x8001, 0x1, 0x7d, 0xfffffffffffffffa, 0x4, 0xfffffffffffffffd}], "af3dcf3d26352cdcc9357a895bbbf2a97cbd330d367c840395d6eb05424d62349f949d74270d054385d6bfb2c42c77f698fa7063d5569930bc04d13606fcd1b79a9136b4f698ada9d0d6361416b87c59f2dbf99e4938f6ecd88aac3ed0d82ecb35d5c7a2e4f482080de1ab7ffebf5958573f490c0f4d6a1eb2657dceca60", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62e)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:28 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1541.988517][T11613] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:28 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:29 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:29 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="00003f004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="00003f004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000300)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:29 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x490000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0xcea87, 0x2ca80d})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0xff00000000000000})

08:21:29 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xff, 0x3f, 0x6e, 0x2, 0x3e, 0x7fff, 0xb5, 0x40, 0x36e, 0xfff, 0x685, 0x38, 0x1, 0xff80, 0x800, 0x400}, [{0x7, 0x1, 0x8000000000000001, 0x200, 0x7fffffff, 0xfff, 0x381, 0x7}, {0x6, 0x1f, 0x8001, 0x1, 0x7d, 0xfffffffffffffffa, 0x4, 0xfffffffffffffffd}], "af3dcf3d26352cdcc9357a895bbbf2a97cbd330d367c840395d6eb05424d62349f949d74270d054385d6bfb2c42c77f698fa7063d5569930bc04d13606fcd1b79a9136b4f698ada9d0d6361416b87c59f2dbf99e4938f6ecd88aac3ed0d82ecb35d5c7a2e4f482080de1ab7ffebf5958573f490c0f4d6a1eb2657dceca60", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62e)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0xcea87, 0x2ca80d})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
mmap(&(0x7f0000eba000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x905a6000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, <r5=>0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r13, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d2aba7e5c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x6, r7, 0x0, r5})
setsockopt$WPAN_SECURITY(r13, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r12, 0xac405, 0x6, 0x3, 0x3c0270})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1542.662976][T11654] loop2: detected capacity change from 0 to 16
[ 1542.703523][T11654] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:29 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xff, 0x3f, 0x6e, 0x2, 0x3e, 0x7fff, 0xb5, 0x40, 0x36e, 0xfff, 0x685, 0x38, 0x1, 0xff80, 0x800, 0x400}, [{0x7, 0x1, 0x8000000000000001, 0x200, 0x7fffffff, 0xfff, 0x381, 0x7}, {0x6, 0x1f, 0x8001, 0x1, 0x7d, 0xfffffffffffffffa, 0x4, 0xfffffffffffffffd}], "af3dcf3d26352cdcc9357a895bbbf2a97cbd330d367c840395d6eb05424d62349f949d74270d054385d6bfb2c42c77f698fa7063d5569930bc04d13606fcd1b79a9136b4f698ada9d0d6361416b87c59f2dbf99e4938f6ecd88aac3ed0d82ecb35d5c7a2e4f482080de1ab7ffebf5958573f490c0f4d6a1eb2657dceca60", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62e)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x8, 0xff, 0x3f, 0x6e, 0x2, 0x3e, 0x7fff, 0xb5, 0x40, 0x36e, 0xfff, 0x685, 0x38, 0x1, 0xff80, 0x800, 0x400}, [{0x7, 0x1, 0x8000000000000001, 0x200, 0x7fffffff, 0xfff, 0x381, 0x7}, {0x6, 0x1f, 0x8001, 0x1, 0x7d, 0xfffffffffffffffa, 0x4, 0xfffffffffffffffd}], "af3dcf3d26352cdcc9357a895bbbf2a97cbd330d367c840395d6eb05424d62349f949d74270d054385d6bfb2c42c77f698fa7063d5569930bc04d13606fcd1b79a9136b4f698ada9d0d6361416b87c59f2dbf99e4938f6ecd88aac3ed0d82ecb35d5c7a2e4f482080de1ab7ffebf5958573f490c0f4d6a1eb2657dceca60", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x62e) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:29 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0xcea87, 0x2ca80d})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x3, 0xcea87, 0x2ca80d}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:29 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0xfffffffffffff000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:29 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0xff0f400000000000})

08:21:30 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
mmap(&(0x7f0000eba000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x905a6000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, <r5=>0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r13, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d2aba7e5c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x6, r7, 0x0, r5})
setsockopt$WPAN_SECURITY(r13, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r12, 0xac405, 0x6, 0x3, 0x3c0270})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1543.196736][T11684] loop2: detected capacity change from 0 to 16
[ 1543.235611][T11684] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:30 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0xfffffffffffff000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0xfffffffffffff000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:30 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
mmap(&(0x7f0000eba000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x905a6000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, <r5=>0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r13, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d2aba7e5c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x6, r7, 0x0, r5})
setsockopt$WPAN_SECURITY(r13, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4)
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r12, 0xac405, 0x6, 0x3, 0x3c0270}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r4, r12, 0xac405, 0x6, 0x3, 0x3c0270})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:30 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0xffffff7f00000000})

08:21:30 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0xfffffffffffff000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0xfffffffffffff000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

[ 1543.796801][T11716] loop2: detected capacity change from 0 to 16
08:21:30 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x40)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000200)={0x18, r6})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r10)

[ 1543.881164][T11716] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:31 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x40)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000200)={0x18, r6})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r10)

08:21:31 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
mmap(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x7390000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:31 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0xffffffff00000000})

08:21:31 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async, rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
mmap(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x7390000) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:31 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
dup2(r0, 0xffffffffffffffff)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0x21, 0x5, r8, 0x0, <r9=>0xffffffffffffffff})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:31 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x80800)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x30001, 0x0, 0x0, 0x2b8d8d, 0x3e99d9})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1544.365529][T11735] loop2: detected capacity change from 0 to 16
08:21:31 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r7, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000})
ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000040)={0x8, r8})
ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000000c0)={0x8, r8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

[ 1544.414793][T11735] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:31 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r5 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x40) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000200)={0x18, r6})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r10)

[ 1544.475263][T11744] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1544.514202][T11744] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:31 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
mmap(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x7390000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r6})
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
mmap(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r5, 0x7390000) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:31 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x80800)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x30001, 0x0, 0x0, 0x2b8d8d, 0x3e99d9})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:31 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x28080)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x9, 0xfffffffffffffffb, 0x8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:31 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0x400fff})

08:21:31 executing program 1:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
dup2(r0, 0xffffffffffffffff) (async)
dup2(r0, 0xffffffffffffffff)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0x21, 0x5, r8}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0x21, 0x5, r8, 0x0, <r9=>0xffffffffffffffff})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:31 executing program 4:
r0 = open(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000e06000/0x1000)=nil})
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1544.874345][T11770] loop2: detected capacity change from 0 to 16
08:21:31 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r7, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000})
ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000040)={0x8, r8})
ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000000c0)={0x8, r8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r7}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async)
ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000040)={0x8, r8}) (async)
ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000000c0)={0x8, r8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)

[ 1544.949252][T11770] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:31 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
pipe2(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x80800)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x30001, 0x0, 0x0, 0x2b8d8d, 0x3e99d9})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1545.038498][T11779] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1545.066408][T11779] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:31 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x28080)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x9, 0xfffffffffffffffb, 0x8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x28080) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x9, 0xfffffffffffffffb, 0x8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:32 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
dup2(r0, 0xffffffffffffffff) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000200)={0x21, 0x5, r8, 0x0, <r9=>0xffffffffffffffff}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:32 executing program 4:
r0 = open(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000e06000/0x1000)=nil})
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:32 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0x7f7b5b48c389})

08:21:32 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x47e0af64, 0x9})
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000040)={0x8, r6})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r7=>0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:32 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x6, 0x0, &(0x7f0000000300)=[{0x2, 0x8}, {0x0, 0x3}, {0x8, 0x3}, {0x4, 0x5}, {0x0, 0x7ff}, {0x9, 0x4}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:32 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r7, 0x0, <r8=>0x0}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r7, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000})
ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000040)={0x8, r8}) (async, rerun: 64)
ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000000c0)={0x8, r8}) (rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:32 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x47e0af64, 0x9})
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000040)={0x8, r6}) (async)
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000040)={0x8, r6})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r7=>0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:32 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x28080)
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x9, 0xfffffffffffffffb, 0x8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1545.569760][T11812] loop2: detected capacity change from 0 to 16
[ 1545.640572][T11812] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:32 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x1, r6, 0x0, 0x47e0af64, 0x9}) (async, rerun: 32)
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000040)={0x8, r6}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r7=>0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:32 executing program 4:
r0 = open(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000e06000/0x1000)=nil})
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8})
open(0x0, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000e06000/0x1000)=nil}) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x42) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

[ 1545.706070][T11820] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:32 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x14080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x4800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, r7, 0x0, 0x2, 0x3666cf, 0xfffffffffffffd52, &(0x7f0000000380)="5b364f6a72b2530dbdd1a7993ab38d8453694bbea84655fb80d3e18f59213ec0ccb757d034f8f5b3115501bf737750c0ba5accea9034fc77084c436a64f5effd87cd499e78d33ed8294edcd5273f774793f1395309a4fa6f3aa6ff6483b3028934deeb6ec492b6d6957a88258cd3dfb331d7d8a8e5895d2afd077bb94f36c7f44eb10055c6425b756ccb1dba6230bb0cb1ea7004de680490389d5c07772b24b8c8ef2266b26d8b571eb61df0620c8471520cb6b5e4fbe36b3c3864b36f12eb6873ec7963c5b108a444ad1ce809fd", 0x10004})

08:21:32 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x6, 0x0, &(0x7f0000000300)=[{0x2, 0x8}, {0x0, 0x3}, {0x8, 0x3}, {0x4, 0x5}, {0x0, 0x7ff}, {0x9, 0x4}]}) (async, rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (rerun: 64)

[ 1545.778309][T11820] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:32 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x9, 0xe}}, './file0\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:32 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r0, {0xf7c}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:32 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0x10000000000000})

08:21:32 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x9, 0xe}}, './file0\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x9, 0xe}}, './file0\x00'}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:32 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r0, {0xf7c}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1546.150247][ T1207] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.156649][ T1207] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.204259][T11856] loop2: detected capacity change from 0 to 16
08:21:33 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r0, {0xf7c}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1546.252694][T11856] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:33 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x14080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x4800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, r7, 0x0, 0x2, 0x3666cf, 0xfffffffffffffd52, &(0x7f0000000380)="5b364f6a72b2530dbdd1a7993ab38d8453694bbea84655fb80d3e18f59213ec0ccb757d034f8f5b3115501bf737750c0ba5accea9034fc77084c436a64f5effd87cd499e78d33ed8294edcd5273f774793f1395309a4fa6f3aa6ff6483b3028934deeb6ec492b6d6957a88258cd3dfb331d7d8a8e5895d2afd077bb94f36c7f44eb10055c6425b756ccb1dba6230bb0cb1ea7004de680490389d5c07772b24b8c8ef2266b26d8b571eb61df0620c8471520cb6b5e4fbe36b3c3864b36f12eb6873ec7963c5b108a444ad1ce809fd", 0x10004})

08:21:33 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x591943, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r1, 0x0, &(0x7f0000000280)="bf27", 0x2, 0x9})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r10, 0x0, &(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x8})

08:21:33 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x6, 0x0, &(0x7f0000000300)=[{0x2, 0x8}, {0x0, 0x3}, {0x8, 0x3}, {0x4, 0x5}, {0x0, 0x7ff}, {0x9, 0x4}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:33 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x591943, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r1, 0x0, &(0x7f0000000280)="bf27", 0x2, 0x9}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r10, 0x0, &(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x8})

08:21:33 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x8001, 0x0, 0x0, 0x16978, 0x3c66b3})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:33 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c9002000700000003000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa56614f750000000000000000000000000000000000000000000000000000000089e873804a8b395cb2c600000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0xfed1, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x1, r1, r5, 0x1, 0x3ff, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:33 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x9, 0xe}}, './file0\x00'}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:33 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x591943, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r1, 0x0, &(0x7f0000000280)="bf27", 0x2, 0x9}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r10, 0x0, &(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x8})

08:21:33 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0x100000000000000})

08:21:33 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x14080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x4800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, r7, 0x0, 0x2, 0x3666cf, 0xfffffffffffffd52, &(0x7f0000000380)="5b364f6a72b2530dbdd1a7993ab38d8453694bbea84655fb80d3e18f59213ec0ccb757d034f8f5b3115501bf737750c0ba5accea9034fc77084c436a64f5effd87cd499e78d33ed8294edcd5273f774793f1395309a4fa6f3aa6ff6483b3028934deeb6ec492b6d6957a88258cd3dfb331d7d8a8e5895d2afd077bb94f36c7f44eb10055c6425b756ccb1dba6230bb0cb1ea7004de680490389d5c07772b24b8c8ef2266b26d8b571eb61df0620c8471520cb6b5e4fbe36b3c3864b36f12eb6873ec7963c5b108a444ad1ce809fd", 0x10004}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r8, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, r7, 0x0, 0x2, 0x3666cf, 0xfffffffffffffd52, &(0x7f0000000380)="5b364f6a72b2530dbdd1a7993ab38d8453694bbea84655fb80d3e18f59213ec0ccb757d034f8f5b3115501bf737750c0ba5accea9034fc77084c436a64f5effd87cd499e78d33ed8294edcd5273f774793f1395309a4fa6f3aa6ff6483b3028934deeb6ec492b6d6957a88258cd3dfb331d7d8a8e5895d2afd077bb94f36c7f44eb10055c6425b756ccb1dba6230bb0cb1ea7004de680490389d5c07772b24b8c8ef2266b26d8b571eb61df0620c8471520cb6b5e4fbe36b3c3864b36f12eb6873ec7963c5b108a444ad1ce809fd", 0x10004})

08:21:33 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c9002000700000003000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa56614f750000000000000000000000000000000000000000000000000000000089e873804a8b395cb2c600000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0xfed1, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x1, r1, r5, 0x1, 0x3ff, 0x7}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:33 executing program 4:
open(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x81, 0xd26a, 0x7fffffffffffffff, 0x6, 0x40000000000, 0x2}, {0x62, 0x8, 0x2, 0x80000001, 0x6, 0x7ad}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:33 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa07614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

[ 1546.816331][T11903] loop2: detected capacity change from 0 to 16
08:21:33 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x8001, 0x0, 0x0, 0x16978, 0x3c66b3})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x8001, 0x0, 0x0, 0x16978, 0x3c66b3}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r1}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:33 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
sendto$x25(r4, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="3e9f384a911245338f0a7b15ed342d1e62ba547e5cd4cfd67fac36c8cd77a4847712e5130adb2318ddba4a05be3eba60f3094d0e4d4f28cc7b8a393430a57d68ce129de2b3e10ebbe9e6d6333ca891ffe5c4a3599a3a6589dc8133722003e66360bdead885cf2b888988ad420ee8e82e927c263d3ef1aac81ab1eeccf2bcde67b342798b889f2732307b2882604604d92371678bf550b6ec4d8b4345c8f7e4fbedd75dabb739c141a62ab2584ae3d70f79deea531e1fabda6e3416b546037dd86b63ff426fceb24a49eaa73e565940a9d8b484550ed6efd4c60bcb0c12687131", 0xe0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x8000, <r9=>r0, 0x80000})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f0000000280)={0xc, r11})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1546.908270][T11903] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:33 executing program 1:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c9002000700000003000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa56614f750000000000000000000000000000000000000000000000000000000089e873804a8b395cb2c600000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0xfed1, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0xfed1, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x1, r1, r5, 0x1, 0x3ff, 0x7}) (async)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x1, r1, r5, 0x1, 0x3ff, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:34 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa07614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa07614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11}) (async)

08:21:34 executing program 4:
open(0x0, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x81, 0xd26a, 0x7fffffffffffffff, 0x6, 0x40000000000, 0x2}, {0x62, 0x8, 0x2, 0x80000001, 0x6, 0x7ad}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:34 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:34 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x8001, 0x0, 0x0, 0x16978, 0x3c66b3}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x8001, 0x0, 0x0, 0x16978, 0x3c66b3})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0x89c3485b7b7f0000})

08:21:34 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x1b2cfa, 0x3c9767})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x458153e0bb0fe77a, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1547.616184][T11949] loop2: detected capacity change from 0 to 16
08:21:34 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:34 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa07614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

[ 1547.660493][T11949] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:34 executing program 4:
open(0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x81, 0xd26a, 0x7fffffffffffffff, 0x6, 0x40000000000, 0x2}, {0x62, 0x8, 0x2, 0x80000001, 0x6, 0x7ad}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:34 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:34 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async)
r4 = accept(r3, 0x0, 0x0)
sendto$x25(r4, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="3e9f384a911245338f0a7b15ed342d1e62ba547e5cd4cfd67fac36c8cd77a4847712e5130adb2318ddba4a05be3eba60f3094d0e4d4f28cc7b8a393430a57d68ce129de2b3e10ebbe9e6d6333ca891ffe5c4a3599a3a6589dc8133722003e66360bdead885cf2b888988ad420ee8e82e927c263d3ef1aac81ab1eeccf2bcde67b342798b889f2732307b2882604604d92371678bf550b6ec4d8b4345c8f7e4fbedd75dabb739c141a62ab2584ae3d70f79deea531e1fabda6e3416b546037dd86b63ff426fceb24a49eaa73e565940a9d8b484550ed6efd4c60bcb0c12687131", 0xe0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0}) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x8000, <r9=>r0, 0x80000}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f0000000280)={0xc, r11}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:34 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xff0f400000000000})

08:21:34 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_clone(0x80100000, &(0x7f0000000100)="d1e5b3eb8cb081ff963266a91081ccedffd1423440f74d16907b2e1f0b0e9211e9ebcf4a4c2bc448", 0x28, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)="7bd214f9e8980f66845faee7d3f5e6f8dc1adda4f88a1df5a68fdd37e55e1d04522bc13acfe67dbd63836421864ef326bc64aecd33efd576d0d04ce9add5ab4c6b0c28807b7ed28950")
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x0, 0x0, 0x8, 0xfffffffffffffffc, r1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, r6})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:34 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x1b2cfa, 0x3c9767})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x458153e0bb0fe77a, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x1b2cfa, 0x3c9767}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x458153e0bb0fe77a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:35 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$NBD_PRINT_DEBUG(r2, 0xab06)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0x48, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

[ 1548.130483][T11977] loop2: detected capacity change from 0 to 16
[ 1548.164864][T11977] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
[ 1548.272402][   T26] audit: type=1400 audit(1688113295.103:753): avc:  denied  { lock } for  pid=11976 comm="syz-executor.1" path="socket:[156876]" dev="sockfs" ino=156876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
08:21:35 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r4 = accept(r3, 0x0, 0x0)
sendto$x25(r4, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="3e9f384a911245338f0a7b15ed342d1e62ba547e5cd4cfd67fac36c8cd77a4847712e5130adb2318ddba4a05be3eba60f3094d0e4d4f28cc7b8a393430a57d68ce129de2b3e10ebbe9e6d6333ca891ffe5c4a3599a3a6589dc8133722003e66360bdead885cf2b888988ad420ee8e82e927c263d3ef1aac81ab1eeccf2bcde67b342798b889f2732307b2882604604d92371678bf550b6ec4d8b4345c8f7e4fbedd75dabb739c141a62ab2584ae3d70f79deea531e1fabda6e3416b546037dd86b63ff426fceb24a49eaa73e565940a9d8b484550ed6efd4c60bcb0c12687131", 0xe0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0}) (async)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x8000, <r9=>r0, 0x80000}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r9, 0x3b88, &(0x7f0000000280)={0xc, r11}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:35 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$NBD_PRINT_DEBUG(r2, 0xab06)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0x48, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:35 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async, rerun: 32)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:35 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r6, 0x0, 0x0, 0x0, 0x5, 0x1b2cfa, 0x3c9767})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x458153e0bb0fe77a, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:35 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$NBD_PRINT_DEBUG(r2, 0xab06) (async)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0x48, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff00000005})

08:21:35 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async, rerun: 64)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async, rerun: 32)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:35 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x3d3b01, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xfffffffffffffce6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r9})

[ 1548.714484][T12009] loop2: detected capacity change from 0 to 16
08:21:35 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x682040, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x25, 0x800, 0x4788)
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x4, 0x8, 0x5446)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = userfaultfd(0x1)
vmsplice(r6, &(0x7f0000001500)=[{&(0x7f0000000300)="e2fb3c3508daad37d73cf1c6258c9206980498bc2c7283dd509126730c125f021a3496035a23af46d4ef6e364b6e9cf103ae7a7835fb42dcd934b714153f5ff2f69c2a234a967fbfe162d17743d1033b4d5eaa0259ca36088acdfa0c6ca89a4bd08f5acfb6540cfe56d38a879bbe9e6d60a7b5a39ddf86414a96a0fa06661ac46dce36dbfe15b159e9fee5480330801b0dd5091850556c6452fbc6fd7a9c72da51386933d8c15be8973459e6e830d5da074e0257adaa739679e7e8465d0974c2739a5afe49265bf4248ba2a30ae3bff3a8fb6724f629dde8dfe49caa53c52a085335bf", 0xe3}, {&(0x7f0000000400)="b2256c98f9e50b699c42cdfc0978f0e19ce5dbebb4c363e12dd498737d6664cbd31aef6c60ab4b6fdefcf4b780b15252d417942841da37183d48cd567e8f5ea1c6c55f6fbb99c0926d82c4a5c0499801acf51f4f9f6f3e3d08559ae9fb25a1caa671ceee0ac0ec55f0cf19d11d2647f9c1b1a463c68d90d6f1051ef43fa1dc1d1231c93d739f66c4b7b9ce764501f1aa1958a395a8d025cdaac37b10938ed52597fdcbac4e33a2444c2c8542c52c60979b205d6f082547e0b68a9b018f8291f3215d0bc2ea8ee3d622c3b284d408e726207dcfa5c357e5e34e1171444224d20bfdfc94d41913217dc01c15f41e2d6b01af39a3d44c", 0xf5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000180)="fdfe8c93e8d7c3c3b727837bbf9901e7b383c6d8b0c9726307", 0x19}, {&(0x7f0000000200)="769c4f4e55d4df16353d8b358169d5d5144d012367cb1b4f5ebc585648b74942a2cf27041e0037", 0x27}], 0x5, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x100102, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1548.767319][T12009] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
[ 1548.804739][T12016] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:35 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_clone(0x80100000, &(0x7f0000000100)="d1e5b3eb8cb081ff963266a91081ccedffd1423440f74d16907b2e1f0b0e9211e9ebcf4a4c2bc448", 0x28, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)="7bd214f9e8980f66845faee7d3f5e6f8dc1adda4f88a1df5a68fdd37e55e1d04522bc13acfe67dbd63836421864ef326bc64aecd33efd576d0d04ce9add5ab4c6b0c28807b7ed28950")
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x0, 0x0, 0x8, 0xfffffffffffffffc, r1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, r6})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async)
syz_clone(0x80100000, &(0x7f0000000100)="d1e5b3eb8cb081ff963266a91081ccedffd1423440f74d16907b2e1f0b0e9211e9ebcf4a4c2bc448", 0x28, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)="7bd214f9e8980f66845faee7d3f5e6f8dc1adda4f88a1df5a68fdd37e55e1d04522bc13acfe67dbd63836421864ef326bc64aecd33efd576d0d04ce9add5ab4c6b0c28807b7ed28950") (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) (async)
fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x0, 0x0, 0x8, 0xfffffffffffffffc, r1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, r6}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:35 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:35 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x10000000002})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x819f}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:35 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x682040, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x25, 0x800, 0x4788)
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x4, 0x8, 0x5446)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = userfaultfd(0x1)
vmsplice(r6, &(0x7f0000001500)=[{&(0x7f0000000300)="e2fb3c3508daad37d73cf1c6258c9206980498bc2c7283dd509126730c125f021a3496035a23af46d4ef6e364b6e9cf103ae7a7835fb42dcd934b714153f5ff2f69c2a234a967fbfe162d17743d1033b4d5eaa0259ca36088acdfa0c6ca89a4bd08f5acfb6540cfe56d38a879bbe9e6d60a7b5a39ddf86414a96a0fa06661ac46dce36dbfe15b159e9fee5480330801b0dd5091850556c6452fbc6fd7a9c72da51386933d8c15be8973459e6e830d5da074e0257adaa739679e7e8465d0974c2739a5afe49265bf4248ba2a30ae3bff3a8fb6724f629dde8dfe49caa53c52a085335bf", 0xe3}, {&(0x7f0000000400)="b2256c98f9e50b699c42cdfc0978f0e19ce5dbebb4c363e12dd498737d6664cbd31aef6c60ab4b6fdefcf4b780b15252d417942841da37183d48cd567e8f5ea1c6c55f6fbb99c0926d82c4a5c0499801acf51f4f9f6f3e3d08559ae9fb25a1caa671ceee0ac0ec55f0cf19d11d2647f9c1b1a463c68d90d6f1051ef43fa1dc1d1231c93d739f66c4b7b9ce764501f1aa1958a395a8d025cdaac37b10938ed52597fdcbac4e33a2444c2c8542c52c60979b205d6f082547e0b68a9b018f8291f3215d0bc2ea8ee3d622c3b284d408e726207dcfa5c357e5e34e1171444224d20bfdfc94d41913217dc01c15f41e2d6b01af39a3d44c", 0xf5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000180)="fdfe8c93e8d7c3c3b727837bbf9901e7b383c6d8b0c9726307", 0x19}, {&(0x7f0000000200)="769c4f4e55d4df16353d8b358169d5d5144d012367cb1b4f5ebc585648b74942a2cf27041e0037", 0x27}], 0x5, 0x8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x100102, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x682040, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket(0x25, 0x800, 0x4788) (async)
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x4, 0x8, 0x5446) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
userfaultfd(0x1) (async)
vmsplice(r6, &(0x7f0000001500)=[{&(0x7f0000000300)="e2fb3c3508daad37d73cf1c6258c9206980498bc2c7283dd509126730c125f021a3496035a23af46d4ef6e364b6e9cf103ae7a7835fb42dcd934b714153f5ff2f69c2a234a967fbfe162d17743d1033b4d5eaa0259ca36088acdfa0c6ca89a4bd08f5acfb6540cfe56d38a879bbe9e6d60a7b5a39ddf86414a96a0fa06661ac46dce36dbfe15b159e9fee5480330801b0dd5091850556c6452fbc6fd7a9c72da51386933d8c15be8973459e6e830d5da074e0257adaa739679e7e8465d0974c2739a5afe49265bf4248ba2a30ae3bff3a8fb6724f629dde8dfe49caa53c52a085335bf", 0xe3}, {&(0x7f0000000400)="b2256c98f9e50b699c42cdfc0978f0e19ce5dbebb4c363e12dd498737d6664cbd31aef6c60ab4b6fdefcf4b780b15252d417942841da37183d48cd567e8f5ea1c6c55f6fbb99c0926d82c4a5c0499801acf51f4f9f6f3e3d08559ae9fb25a1caa671ceee0ac0ec55f0cf19d11d2647f9c1b1a463c68d90d6f1051ef43fa1dc1d1231c93d739f66c4b7b9ce764501f1aa1958a395a8d025cdaac37b10938ed52597fdcbac4e33a2444c2c8542c52c60979b205d6f082547e0b68a9b018f8291f3215d0bc2ea8ee3d622c3b284d408e726207dcfa5c357e5e34e1171444224d20bfdfc94d41913217dc01c15f41e2d6b01af39a3d44c", 0xf5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000180)="fdfe8c93e8d7c3c3b727837bbf9901e7b383c6d8b0c9726307", 0x19}, {&(0x7f0000000200)="769c4f4e55d4df16353d8b358169d5d5144d012367cb1b4f5ebc585648b74942a2cf27041e0037", 0x27}], 0x5, 0x8) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x100102, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:35 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:36 executing program 4:
r0 = open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x10000000002})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x819f}}, './file0\x00'}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff00000006})

08:21:36 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x682040, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x25, 0x800, 0x4788)
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000001580)=""/69, 0x45}, {&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x4, 0x8, 0x5446)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = userfaultfd(0x1)
vmsplice(r6, &(0x7f0000001500)=[{&(0x7f0000000300)="e2fb3c3508daad37d73cf1c6258c9206980498bc2c7283dd509126730c125f021a3496035a23af46d4ef6e364b6e9cf103ae7a7835fb42dcd934b714153f5ff2f69c2a234a967fbfe162d17743d1033b4d5eaa0259ca36088acdfa0c6ca89a4bd08f5acfb6540cfe56d38a879bbe9e6d60a7b5a39ddf86414a96a0fa06661ac46dce36dbfe15b159e9fee5480330801b0dd5091850556c6452fbc6fd7a9c72da51386933d8c15be8973459e6e830d5da074e0257adaa739679e7e8465d0974c2739a5afe49265bf4248ba2a30ae3bff3a8fb6724f629dde8dfe49caa53c52a085335bf", 0xe3}, {&(0x7f0000000400)="b2256c98f9e50b699c42cdfc0978f0e19ce5dbebb4c363e12dd498737d6664cbd31aef6c60ab4b6fdefcf4b780b15252d417942841da37183d48cd567e8f5ea1c6c55f6fbb99c0926d82c4a5c0499801acf51f4f9f6f3e3d08559ae9fb25a1caa671ceee0ac0ec55f0cf19d11d2647f9c1b1a463c68d90d6f1051ef43fa1dc1d1231c93d739f66c4b7b9ce764501f1aa1958a395a8d025cdaac37b10938ed52597fdcbac4e33a2444c2c8542c52c60979b205d6f082547e0b68a9b018f8291f3215d0bc2ea8ee3d622c3b284d408e726207dcfa5c357e5e34e1171444224d20bfdfc94d41913217dc01c15f41e2d6b01af39a3d44c", 0xf5}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000180)="fdfe8c93e8d7c3c3b727837bbf9901e7b383c6d8b0c9726307", 0x19}, {&(0x7f0000000200)="769c4f4e55d4df16353d8b358169d5d5144d012367cb1b4f5ebc585648b74942a2cf27041e0037", 0x27}], 0x5, 0x8) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x100102, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:36 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1549.300412][T12015] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1549.316204][T12047] loop2: detected capacity change from 0 to 16
08:21:36 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x204400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, r1, 0xfff, 0x1, 0x3})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1549.340597][T12047] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:36 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x3d3b01, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xfffffffffffffce6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r9})

08:21:36 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x10000000002})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x819f}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x10000000002}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x819f}}, './file0\x00'}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

[ 1549.609654][T12065] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:36 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff}) (async, rerun: 64)
r1 = syz_clone(0x80100000, &(0x7f0000000100)="d1e5b3eb8cb081ff963266a91081ccedffd1423440f74d16907b2e1f0b0e9211e9ebcf4a4c2bc448", 0x28, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)="7bd214f9e8980f66845faee7d3f5e6f8dc1adda4f88a1df5a68fdd37e55e1d04522bc13acfe67dbd63836421864ef326bc64aecd33efd576d0d04ce9add5ab4c6b0c28807b7ed28950") (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
fcntl$lock(r0, 0x5, &(0x7f0000000380)={0x0, 0x0, 0x8, 0xfffffffffffffffc, r1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, r6}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:36 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x204400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, r1, 0xfff, 0x1, 0x3})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x204400, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, r1, 0xfff, 0x1, 0x3}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:36 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x242081, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff0000000a})

08:21:36 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x22, 0x3, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xfffffffffffffe9e})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x800000000004})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r8=>0xffffffffffffffff, 0x1})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x2ca00c})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r12})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r12, 0x0, 0x3ff, 0x8})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc})

[ 1549.842674][T12059] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:36 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x3d3b01, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xfffffffffffffce6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r9})

08:21:36 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x22, 0x3, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xfffffffffffffe9e}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x800000000004}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r8=>0xffffffffffffffff, 0x1}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x2ca00c})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r12}) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r12, 0x0, 0x3ff, 0x8})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14}) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc})

[ 1549.954500][T12082] loop2: detected capacity change from 0 to 16
[ 1549.983252][T12082] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:36 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x242081, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:36 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x204400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, r1, 0xfff, 0x1, 0x3})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1550.014637][T12088] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:37 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x44, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:37 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async, rerun: 32)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x22, 0x3, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xfffffffffffffe9e}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x800000000004}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r8=>0xffffffffffffffff, 0x1})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x2ca00c}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r12})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r12, 0x0, 0x3ff, 0x8}) (async)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r14}) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc})

08:21:37 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

[ 1550.126644][T12088] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1550.296157][T12110] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1550.344783][T12110] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:37 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00')
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x1, 0x0, 0x0, 0x2705c4, 0x29c92b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:37 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x242081, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:37 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:37 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:37 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff00400fff})

08:21:37 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x44, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1550.751360][T12131] loop2: detected capacity change from 0 to 16
[ 1550.775112][T12131] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:37 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:37 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r1})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:37 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x44, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:37 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff05000000})

08:21:38 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1551.124565][T12151] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1551.152617][T12151] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1551.265130][T12158] loop2: detected capacity change from 0 to 16
[ 1551.318417][T12158] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:38 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00')
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x1, 0x0, 0x0, 0x2705c4, 0x29c92b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:38 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x29b)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:38 executing program 4:
open(0x0, 0x0, 0x0) (async)
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:38 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0xc00, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x5, 0x3f9faf, 0xc3, &(0x7f0000000300)="3bd0bcce5037224d47dc9dbb9f7d2db3bea854965ed9857e9a7b378d865821ce4c17810c8cfd55094c4fe8e8ef3ffee876e273efa50b0f493382fc2caaa693416863864673f79f02133f0d07a045431c87225fad9c7e73da3fcd481f306925bcf5217552297dff3378f51c20ba15aba4233f5a79f46c7131c478ba02e8166bd65254a8691869b959418d5ffb7fea581a2d1732b7a891a42edba6fd2f1c7529b16c6dd8f6c0df678f4fcff3f4fd0a8a9a5157911067662261a22a4990415b30da7896f2", 0x10001})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x40502, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0)

08:21:38 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0xa0000)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff06000000})

[ 1551.856695][T12173] loop2: detected capacity change from 0 to 16
[ 1551.871853][   T26] audit: type=1400 audit(1688113298.703:754): avc:  denied  { append } for  pid=12165 comm="syz-executor.0" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1551.888395][T12173] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:38 executing program 4:
open(0x0, 0x0, 0x0) (async, rerun: 32)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async, rerun: 64)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

[ 1551.976162][   T26] audit: type=1400 audit(1688113298.733:755): avc:  denied  { ioctl } for  pid=12165 comm="syz-executor.0" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
08:21:39 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0xa0000)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:39 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c467f02ff09810000000000000002003e0001000000bf000000000000004000000000000000350000000000000001000000fcff38000200245106000700000000709ac3000002000000000000000400000000000000060000000000000009000000000000000200000000000000030000000000a0000400000001000000ff7f000000000000136d00000000000063ed5c0900000000d706000000000000800000000000000006000000000000006c7f851310cf31a81e68f5a02c0a2a038f4e7c690a92fa9c607397673b442e48ddafbe3b3b2d0670acceef650ce86436ed410da4393f35f0e7a48db2dbf098b9c1bac73f2b57584dca88f0cac8491f1bc59ce812523c50e2a28407ce1954c861aebc08640931250aaa6f48bf863620f0ff634e3d942b7d9d06216f7f899d3466649d8d43c759f12faa4659b4d5e2502cd354c749a0c2636c5356546715c3e4db95abbbaf58ad5fd5333c4cb434938304c86cdb3eea80557034bde1d8322e20c503ea66e6d56adf5b5b034b2321f9cfd5bf4296fbaf959ae72a12effeb8b891138ea11dab78dab3324e331900000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000628de04b0000000000000000000000000000000000000000000000000000000000000000e56930e254479e8bf44a4813c93083b0f3587ad5a99b8718251d9885a5f1e14fe49d25e920af70e17a4cef85cfc900c5fcbe3f4be152feafc0917819e34869cbce751dc570da6a6105a8332c20786968fc5f3b9194a76db4be5c7cddb12cc28b374440a851a6"], 0x29b) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:39 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0xc00, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x5, 0x3f9faf, 0xc3, &(0x7f0000000300)="3bd0bcce5037224d47dc9dbb9f7d2db3bea854965ed9857e9a7b378d865821ce4c17810c8cfd55094c4fe8e8ef3ffee876e273efa50b0f493382fc2caaa693416863864673f79f02133f0d07a045431c87225fad9c7e73da3fcd481f306925bcf5217552297dff3378f51c20ba15aba4233f5a79f46c7131c478ba02e8166bd65254a8691869b959418d5ffb7fea581a2d1732b7a891a42edba6fd2f1c7529b16c6dd8f6c0df678f4fcff3f4fd0a8a9a5157911067662261a22a4990415b30da7896f2", 0x10001})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x40502, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0) (rerun: 32)

08:21:39 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000100000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000013f1ffffffffffffff00095c9b9baa57614f75000000000000000000000000400000000000000000000000000000000000000000000053b9ff6c3c40daf7ce2d88a554a487df8a467b9953503cc703dfe08404001b411f0000000000000000"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0xffffffff, 0x0, 0x125b48})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x0, 0x0, <r8=>0x0})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='#$([+\x00', &(0x7f0000000300)="0623d79845affdc4b7fb309070f1bf8fa1cf7c67bc6243461554f8258fa2c8b812b5747be9092ac588b6e76440e64fd32caf71df122e27ac6a6eba3debb1071b5410cf204f86ec808146228141c0b9fcb45888e19e7f2ba2c42a3bc6843c92f45c09bbcb52be774cbc73ec4f313a89c287c3fb6e6cf8a75f9bda33270d1e0e2dab271bbb15b86fa970ef9c5668c61e04489a4c4487714a3522f3dbec22c41090bda8ef4d6beee8b8851d12fbd9bfff7d920731c51c6d640b1653e2959baefb0ed637445ba21b1f60545b7d02b1331303fa4732b9d957805aa2a5fe667ef5f8653721", 0xe2)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r8})

08:21:39 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6, 0x0, 0xffffffff0a000000})

[ 1552.552276][T12202] loop2: detected capacity change from 0 to 16
[ 1552.573622][T12202] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:39 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00')
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x1, 0x0, 0x0, 0x2705c4, 0x29c92b}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:39 executing program 3:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x29b)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:39 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000100000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000013f1ffffffffffffff00095c9b9baa57614f75000000000000000000000000400000000000000000000000000000000000000000000053b9ff6c3c40daf7ce2d88a554a487df8a467b9953503cc703dfe08404001b411f0000000000000000"]) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0xffffffff, 0x0, 0x125b48}) (async, rerun: 32)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x0, 0x0, <r8=>0x0}) (async)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='#$([+\x00', &(0x7f0000000300)="0623d79845affdc4b7fb309070f1bf8fa1cf7c67bc6243461554f8258fa2c8b812b5747be9092ac588b6e76440e64fd32caf71df122e27ac6a6eba3debb1071b5410cf204f86ec808146228141c0b9fcb45888e19e7f2ba2c42a3bc6843c92f45c09bbcb52be774cbc73ec4f313a89c287c3fb6e6cf8a75f9bda33270d1e0e2dab271bbb15b86fa970ef9c5668c61e04489a4c4487714a3522f3dbec22c41090bda8ef4d6beee8b8851d12fbd9bfff7d920731c51c6d640b1653e2959baefb0ed637445ba21b1f60545b7d02b1331303fa4732b9d957805aa2a5fe667ef5f8653721", 0xe2)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r8})

08:21:39 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0xa0000)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:39 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x7, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x4, 0x2c1788, 0x2439f5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:39 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0xc00, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x5, 0x3f9faf, 0xc3, &(0x7f0000000300)="3bd0bcce5037224d47dc9dbb9f7d2db3bea854965ed9857e9a7b378d865821ce4c17810c8cfd55094c4fe8e8ef3ffee876e273efa50b0f493382fc2caaa693416863864673f79f02133f0d07a045431c87225fad9c7e73da3fcd481f306925bcf5217552297dff3378f51c20ba15aba4233f5a79f46c7131c478ba02e8166bd65254a8691869b959418d5ffb7fea581a2d1732b7a891a42edba6fd2f1c7529b16c6dd8f6c0df678f4fcff3f4fd0a8a9a5157911067662261a22a4990415b30da7896f2", 0x10001}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = open(&(0x7f0000000040)='./file0\x00', 0x40502, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$BTRFS_IOC_SCRUB_CANCEL(r9, 0x941c, 0x0)

08:21:39 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:39 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000100000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000013f1ffffffffffffff00095c9b9baa57614f75000000000000000000000000400000000000000000000000000000000000000000000053b9ff6c3c40daf7ce2d88a554a487df8a467b9953503cc703dfe08404001b411f0000000000000000"]) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0xffffffff, 0x0, 0x125b48}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x0, 0x0, <r8=>0x0})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='#$([+\x00', &(0x7f0000000300)="0623d79845affdc4b7fb309070f1bf8fa1cf7c67bc6243461554f8258fa2c8b812b5747be9092ac588b6e76440e64fd32caf71df122e27ac6a6eba3debb1071b5410cf204f86ec808146228141c0b9fcb45888e19e7f2ba2c42a3bc6843c92f45c09bbcb52be774cbc73ec4f313a89c287c3fb6e6cf8a75f9bda33270d1e0e2dab271bbb15b86fa970ef9c5668c61e04489a4c4487714a3522f3dbec22c41090bda8ef4d6beee8b8851d12fbd9bfff7d920731c51c6d640b1653e2959baefb0ed637445ba21b1f60545b7d02b1331303fa4732b9d957805aa2a5fe667ef5f8653721", 0xe2) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r8})

08:21:39 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x7, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x7, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x4, 0x2c1788, 0x2439f5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:40 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x7, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x4, 0x2c1788, 0x2439f5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:40 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x8, 0x2c6a2b, 0x83033})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r10})

08:21:40 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:40 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {<r5=>r3}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x8, r2, 0x0, 0xe22, 0x94, &(0x7f0000000300)="fb98912ba2c24c835bc922a9acf7507d7735552f204a90c69d560d1a5b8c70085b5615635f00dacea52c39223175b6d83f522b5398f046ca5ad5bf9d56f28aabe15307f058df07eddbfc6e0deab73505376b9ff2e3cf87ced5cb5aa410ffc602a0e51f01a318be155f8b6e0a7f7b4e453541eb7e3cd19f6d289574d928b2dfc4d70ae83a7d05ec89db657cb489482c3c7689bf1f", 0x4})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000003c0)={0x28, 0x2, r4, r4, 0x1, 0x7, 0x3ff})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x270800, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x6, {0x7, 0x9, 0xbe40, 0x882}})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r6})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r14})

08:21:40 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1\x00'})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x371300, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:40 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:40 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x8, 0x2c6a2b, 0x83033})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r10})

[ 1553.604755][T12254] loop2: detected capacity change from 0 to 16
08:21:40 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1\x00'})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x371300, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:40 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:40 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1\x00'})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x371300, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:40 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0x8, 0x2c6a2b, 0x83033}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r10})

08:21:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x270800, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x6, {0x7, 0x9, 0xbe40, 0x882}}) (async)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x6, {0x7, 0x9, 0xbe40, 0x882}})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r6})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r14}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r14})

08:21:40 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:40 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {r2}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1554.105017][T12285] loop2: detected capacity change from 0 to 16
08:21:41 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {<r5=>r3}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x8, r2, 0x0, 0xe22, 0x94, &(0x7f0000000300)="fb98912ba2c24c835bc922a9acf7507d7735552f204a90c69d560d1a5b8c70085b5615635f00dacea52c39223175b6d83f522b5398f046ca5ad5bf9d56f28aabe15307f058df07eddbfc6e0deab73505376b9ff2e3cf87ced5cb5aa410ffc602a0e51f01a318be155f8b6e0a7f7b4e453541eb7e3cd19f6d289574d928b2dfc4d70ae83a7d05ec89db657cb489482c3c7689bf1f", 0x4}) (async)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000003c0)={0x28, 0x2, r4, r4, 0x1, 0x7, 0x3ff}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:41 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x39, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000f07000/0x4000)=nil, 0x4000, 0x40000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:41 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:41 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x270800, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x6, {0x7, 0x9, 0xbe40, 0x882}}) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x2, r6}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1}) (async)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r14})

08:21:41 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:41 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {r2}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

[ 1554.606598][T12301] loop2: detected capacity change from 0 to 16
08:21:41 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x39, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000f07000/0x4000)=nil, 0x4000, 0x40000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYBLOB="825c34ca513dcbc17c59e1048dccb8172b416ec4b986937e271666d5e4785f2d8f85afcb229fe26ce15f0498b9666c12eb0ab75ad3cef96eb5341cbb7f0d6003956d391b38b7310597caf5d28ed641ebd100f40e23c9e59512f78130d86be94de4395906e330b3e385d4860549400757f050b750", @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:41 executing program 4:
open(0x0, 0x0, 0x0) (async)
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x39, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000f07000/0x4000)=nil, 0x4000, 0x40000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000f07000/0x4000)=nil, 0x4000, 0x40000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:41 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x101}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x4, 0x0, &(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0x4, 0x1ff}, {0x8000000000000001, 0x7fffffff}, {0xd9ff, 0x100}]})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:41 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) (async)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1554.911477][T12320] loop2: detected capacity change from 0 to 16
[ 1554.947836][T12320] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:41 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x101}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x4, 0x0, &(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0x4, 0x1ff}, {0x8000000000000001, 0x7fffffff}, {0xd9ff, 0x100}]}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:42 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {<r5=>r3}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x8, r2, 0x0, 0xe22, 0x94, &(0x7f0000000300)="fb98912ba2c24c835bc922a9acf7507d7735552f204a90c69d560d1a5b8c70085b5615635f00dacea52c39223175b6d83f522b5398f046ca5ad5bf9d56f28aabe15307f058df07eddbfc6e0deab73505376b9ff2e3cf87ced5cb5aa410ffc602a0e51f01a318be155f8b6e0a7f7b4e453541eb7e3cd19f6d289574d928b2dfc4d70ae83a7d05ec89db657cb489482c3c7689bf1f", 0x4})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000003c0)={0x28, 0x2, r4, r4, 0x1, 0x7, 0x3ff})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:42 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {r2}}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:42 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x401)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5423)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r9, 0x3ba0, &(0x7f0000000100)={0x38, 0x9, 0x0, 0x0, 0xd6})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:42 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:42 executing program 0:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x101}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x4, 0x0, &(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0x4, 0x1ff}, {0x8000000000000001, 0x7fffffff}, {0xd9ff, 0x100}]})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYBLOB="825c34ca513dcbc17c59e1048dccb8172b416ec4b986937e271666d5e4785f2d8f85afcb229fe26ce15f0498b9666c12eb0ab75ad3cef96eb5341cbb7f0d6003956d391b38b7310597caf5d28ed641ebd100f40e23c9e59512f78130d86be94de4395906e330b3e385d4860549400757f050b750", @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1555.390347][T12349] loop2: detected capacity change from 0 to 16
08:21:42 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000100)={0xc, r4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000110000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0)
close_range(r5, r8, 0x0)
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000040)=0x5)

[ 1555.433880][T12349] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYBLOB="825c34ca513dcbc17c59e1048dccb8172b416ec4b986937e271666d5e4785f2d8f85afcb229fe26ce15f0498b9666c12eb0ab75ad3cef96eb5341cbb7f0d6003956d391b38b7310597caf5d28ed641ebd100f40e23c9e59512f78130d86be94de4395906e330b3e385d4860549400757f050b750", @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:42 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000002f00000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000002c0)={0x38})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r7, r7, 0x9, 0x273, 0xfff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000280)={0x3, 0x2, 0x1, 0x0, 0x0, [{{r3}, 0x2}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:42 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:42 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x401) (async, rerun: 32)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (rerun: 32)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3}}) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5420) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5423) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0}) (async, rerun: 64)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 64)
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r9, 0x3ba0, &(0x7f0000000100)={0x38, 0x9, 0x0, 0x0, 0xd6}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:42 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000002f00000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000002c0)={0x38}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r4}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r7, r7, 0x9, 0x273, 0xfff}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000280)={0x3, 0x2, 0x1, 0x0, 0x0, [{{r3}, 0x2}]}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

[ 1555.775344][T12365] loop2: detected capacity change from 0 to 16
[ 1555.820556][T12365] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:42 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000002f00000ff"])
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000002c0)={0x38})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r7, r7, 0x9, 0x273, 0xfff}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000280)={0x3, 0x2, 0x1, 0x0, 0x0, [{{r3}, 0x2}]}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:42 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000100)={0xc, r4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000110000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0)
close_range(r5, r8, 0x0)
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000040)=0x5)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000100)={0xc, r4}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000110000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0) (async)
close_range(r5, r8, 0x0) (async)
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000040)=0x5) (async)

08:21:42 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x401) (async)
sendfile(r0, r0, &(0x7f0000000040)=0x2, 0x401)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5420) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5423) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x5423)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r9, 0x3ba0, &(0x7f0000000100)={0x38, 0x9, 0x0, 0x0, 0xd6})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:42 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:43 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901bcc8d45d2afc7cabb7056c9064d97b19682b175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfa75, 0x301240)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r3, 0x0, &(0x7f0000000700)="c339a8ad3e3dcf394f14eabb704403849c1dc5fe9002fc7150f6f19e963f09fdf64eb817cf59376a7149593f41233b7d13aa07566a14ab1211a386539d048fa9d41ed8f6fb5f8ba446e8dfaa60666c570b29448307fe4b0e2e28b165f3aaed8ad3ab237ab0b1ce8e135905279843e3d7157ca543d66801239b98ab908f6bde4b5dc8a56c9d7d69fa26945da5b6470616b2e2cbc274ba291e34db3756018fe31309720bc2d62febc2c6b2786ac9d4ea46f0981136b243590afa3e0e5056de751dddbfccf769110f942374bcd907ad68479f97491b07cd2822a9f9bd20ace7865d13db3f2814616d9a23871adb1de86b7f06d8c547e0b807ebcc145a7cbe54c0fc8066f3ad603cd1c7b1da91a382def4858cc81730535c232e323bb63a0f5114af6f944f4af3b5cc1968895d4caae55e2467ebecd7b3eadc253eeabdb82ac991b74bfbba7405db43a0379520ef502843634ec890bb16722f14c73ea37b03ce7a8ae644fa02e126c52d6e62edb5fa3e21e7bd8f5e46b4ad059a369701f11c30ebc420c125fdc174157c94957ad39442d1b0db7e9beb07dfd3c00a1c49434e1ef17a3f8e8ff2549a93d94793f2ac98cc84d418ecfa461b01921ae8c846b964b0fb34598f87f61e701866d7cf4bafc0b4e8308a74eee6e76879a3f2046eb263d4ebcf73d5ba36101e24bd8dd98272275fcbc509b6cd6d2f49e65ba573ff280bd020ee5d87a89412e262e230591de7b01de85f9a8b605b4910ec125c4165cd879b13bd16146d833e421cbaf237a596dfe2eca75b7add942a8f095ead30c463c53949665475d2e6c4c29cd2d6cf842dfe51295149c4b5404ba1ea3d96203f0f63d4f6069df675cef8e5ab7e29b2f914bf075316a8ab438b04de971624600083f5033c183675a72da0ec1776e490d6431457aeff6e27178f116d87271f1ae817d723eca5cfb375974a92831aa9e9c6a9aabb75fda4841197f1a0a8c201f9f9e5568557587f3c67aaf7ea90a574eeefdffc478810b1ffd35d5e2093b3fe825fda1a9fff46f82fe18b645062a03750aa24f96aeb9eb13f982ff0393c5998c42f84020b73d4381479a49c1b0bad0d1ddec9fcf61710866fbd5bd76bec5d213faa74c6253bc51e6782ca6c58a40f87181b6c7bf0e2b3555f3074516665c5b3af57527d654000839aa3f1f698292de5c70be14b31b8503e19bdb39ecbad68e6314c4282be4da9b73c71167c1c699c1728c3c1ed575a82cfb427c92b1c14debadfec0865d3b6c2abf7f53640d0f7ff9f81acaa695328a403224c5b177d115660a248010da50ffafa289c1d6b550ebfbd3f0a38401b873a6d5f6f8b0979a64b584c65ca7825455b429e86f3bdb7ce1724eeaef424786d14e7dd831b58fc84c73c76df0c10e80ca8d1d6fd94d1749c27487956f31cec4fdbc4931ae86a38106cbc8193f942eae52a2c4131edc9841284ec8a70c75087df8cc1325a95a62e36f47553d74279f82a71a00d65dccbefd1c32c6cee6b29ae55c53a0d4e6932e5fb9714f6ca7f4166bf5689109640927623f39e36227fb2492b49b75108d33bdcf3cfa0e5f016b26c1f16d7e7aed09501aedec20419fd606a1ee8351898ba26682fc5dd7df64a5d011570973d37650c47d606166076cbea527b113d898c20c54a2fa52f63e472e4b3ba7c1ad608101db34fe726e5d0475236f758beb069e7bf5692a5dffc4f6d0d36222431e32e6771b5f8cffd526124d1cb3ced0785298ad155cdf2782472a3f86090a38a8f0b23077072695713b9f364bee77ad0e9660f02599bbc4230912e1708911e8e392b647aee53ba56832a3eb4b8e889ae3ed9228d7246137de670c74da8df5ec828dd517f36d4aae26533d38a0108dc71736bc4fc5fa3d0468b47090a28f44ef41b98b2ba948533e7bf1ac3e92c057195223f877acfcfbbb7ceba258b251e635d31f5a4ee468900ed7eaeed0cca7da6859442863b815ecf1d6c78df229b303c50b7e30412ca78b7def9ea713a40b56acfc8b289cc720d8ab66eb2f4312a53feace17b82b8ef77156d3b4530a39d03f896d789a7dcca1c3619732852069fe0af952fc6e50428f2aacda3be3dc567b9f1d859ad5a848594b2afe95ac7f8878ee7e4fdbc6a5bc9556c7424cfdcf7200494c5d6eb22a118c6d30ba014c69973b8e2a36d07d164101858fc4c69d14a9e43ff7dfdc434de2139ac06bb4da263f9132b28353297d95c8a6a022bdb9440babcc73c4b43354e03fe1120c17143bc96aadab26e083d389987eb4a9d7f63f55904b9e10f0403ebcb0142b47bb85daece5732b3c70f090b8c53bc4628960bac6ab1df96b7c69bd3243afe54c4c028e5373c1db4ea710e750d448a3c0cd8a18e78606a4a9e2115ea0e628dada8782bd8fa963e7b660845ffef65acc0d8ee643d5c730b4fb4b4b65eabbf18fa5e52f89cc2b3dadf44a71ea88aa8de3a327088bd248816c72de9ec4e34eed027c4ee1b3edbd7502f10bfbaa25b8baa1325b545197399cb71701d81b58b6e85d05996b38fb19d1e6bcee708d6f000edb9dce766fd90cc77920c54c727f7b5f7554bba76086cc275e3ac6535ead6f136fe67e01e6e9fe61bb152c003eca64e028f74cfd3f5d15e4656476e4ba6c06d5524d9b5d502a4107ac4197d0a96d456c91cdbcc966c877792f20d737ef23e8557c5dfb96c15975806708cea9d7b51a0d0a2b6f0e3b38bc97907730945d2a8ce1d6387984b2aee13ad901fae6e6e19de8b168316e2ca83c65586e351dcaa7041494cc86c6258dd6c2c60bbed8314ceab1d7a7bfe798a5bc0d13c4559a3fde8acac96a94b5fc21969386f22cae3a0075ac64bb3129324ed61d8ceab31fcb6c6ebccc91135295bf346a719e1998b2cafe64119c519e7706d7246acecf3d6712ca0dcc015893a5092a933f6f575c4d3f2271a60e12eed06de3f61a659f159ef1aa1839b138980dec25d9ace9006e9ba7e89a020592ed8a6fc86cb186dbc1bcd4113c2265e50c6f4fa65241d416a0f646d9479f639a04e49bb87b4e7cceae21bae2d531686ad1635af87f58fb64152a02bea8c1212811c6529c2803ba224c3f906bca2fc7e4b309e705206c44ba95749d0baefdfd5ca55e1d4c9c61b985ce708f504292896e60b3bce3ca8648ae63ca7abb2f6c504261b31af0f1ff370c4f80f688af1451186aae33b3a568903e02dc838e7007157d13196fe371d23e13040f1e49196d32354a10c8558ab77efc01b0a18539974423c0e23f132c10d2126997b915ca61a072a5744e478c2fb61a3528230449a3a120e26fd046d89789e141e4e7bd1624dd16aeb128ff4068f90453f8edeeac848892ec75bb5128dab8e4aa84545299dc6d69e484c40c7f83c36ef72a63cc6e31bbd12e0789219d1f3044a4100655a4d55de9f9dde16321ac03c9312dad0a6829fd0fcb582f7246aa2f5ec2b299162e9f3f331f0bb4c4573d2fba6106a47084c17cb514001fdb6a94e33975018b726dec894abccf9f24f8ddf99a3f3bb5fbf2104f42d5393b3602fb5d809d87a2c0377d67e703cb289b580acdd0d404aaf382da736f43a36adb542ca9249b3d597554b8709a2fc20aaacc83cd24f9f59d070a819e9061e24d2dadf8ec8cb6b8b4c629f61e1a495eb8f1e937cfaa43a6726afd7211880b5b204b5b5075405a03b2edddb448671d040663cddab4281b425a9421d155f648fd97367c2b1c18cfc067aaab3da7db28abba25d2b6e441977582b874262e0bd0fb5be8774e42f0c609e471887f9a5f8637322c60fc768c91d33287fbb2f84cca67b1d77d873b296832c7b5441952851db77e092f3fba8dfa6aab331824222cbd8ec42175de08f1773527d0a2fab6792463a6721d4ebb843fbbdac311c1869e2f58781a6365aca7cbea1e8b2d5a7b20a62021aa9f0e5f72aa90465b8168a589bd6667509f023d0a10646065135abf26693aa89b37a8d74ea93838f863421525e84d0e971c86199ba58945ef9983f00f541ed617b3f69750473173e4227a387fcd544fbaf110341f3b4a2f217f5e8a8c264f0ed5b3eb8e882cdd8222f4e3316b808cf778360bedc827399b73f15416a007014311edeb272dc961559131ff5178cd57bee636a4d94de9509b4d2a14a8d3701f32e8082d687828f91e3e2539907ccf567e0ab3eaddb871799058acc8c9a6fde356f240769b9f1256116449dcac4efad908a6d3e81455124ecd350f858e16b1718b43a5394d001bdaf186126edbd480ad9533914d936f9446117f986fbb706c10bba9b6673eedc568f486b51a6a4688c5a27854be5d223533a664eac09bb485722abe9dcecc9e10c4e4f526901fd336890603301ad25c4024aa96e4fc8cc1f587620775162048c75b75380fe8c6c5388f54e903017734e7fa01ab519a614c4af5ffa7c5cef10813d63db20bf2bdde2f912a53026d1019b57642d6eb757d512d8b27c40c0330e7bdc43096059fe47882543ef10ada77ede68e278f9750099ac77659981e065f2cf45bbb88cf4b9cb42ea06a9e387d7db28bdbe6ebf26d90bd80c5ba4bd56802f90adc1db22a02cf12949529d31d6c8f5b6f89f0cc91f1a7c4eab4feeb6db829bbcaa507316b3d816f021d59f291f83a130a004c79f5acce521bb2c9f63007da2532d6de1d2290bc75e81de83930e18097209d2e38a0079f77fdf6ced1a80f3c478cd076ce891cfd493349a3a09ca6b033c3389597efdd093446dcfb2351ebaf12181af7bc686b8abc1a6d91d56d11bdec22e5e6a2827b097cf56a39e3e7628421d52e458303f7141ea2a2469eb9f2d9017c844b511ccb291708c82c51fbe9abc951ee7ea628f09b65ae3c12444a159ed660f3b3da29f5af3897686be2e7a22abf1f5a625a09dfdfd6ff17315ab842159a77238d3ad749c7c3033d861e89b7059a800dfedbcf23c9113a884df057c3303a32a6401f1630a2d613e7a707ce449a58ccb52b32bbf36a752ca99b35804706030c55f221460401018e44f5622ffa70530c284e61b396198da889cd7dd11dc05baec33f8ae5fc37aa593f1038afcc80a2ed31f178154c569a4106ada2b9bc545e965a0576541723aecace8d58e9d9a6dc1ec4beb806bbb199e1dc109c60e55b4368299a902c13ebe6ccd617484c9bff8355176c9bbcecc18242a7d28e924484b9658b8330539fbb9990dd50d45d7680e9c6617961e12cae5fa01edb5c7cde35fbedfc855392a5b280fd1033875a6a5e6631e63bb3b2f0cae7c7ec417ef46ee702b91105c3e46b1c1accfebef719a95a3960b4e5892d8517f7542d90887b99d0bb00d2e4da414c84f69c624c49f388aaee0e734c55af0aa9352a52d8b1e2362270d6f444b282b59e21fb8641a94bef73fa6eb7eeb16ce2b83fa1e8d32def9dbcfc2ee30430df44539a5362d5a2e5d406db27bc85598da50ecc4f73023d952f27e03cee0e9369cd11415f4fe21b5ae3782ef39d8b60a3d58635cc24c11f4113ecb0dc5b3eb454c50dcd4cbbc240944b0a8e2a4636cd20d899c404b50f4839dd33101083501ca35c64cf8911897a8dde9c1189dc4a1c4d50e8eed3348ded7b1dba54126bf9594efa50e53cab322d481bf04e16e5b8fdcf2d61dcfe8ee5a0a90856714c1888ce2ebc6dc041f1c028d17890bc30fea419caf889cecd138d68e9e2bac6bdac15f25456ac10bf807f8c62276322a98f790ddaecb22332beb6865f926f1be1b24d665b5e43309d9645c0640ce531db495e4e82628c9d392cd109fb5179eb2dfbe2b5fb34b5cb6d38075ce4e5284d0a2dced35498659e1291532d661", 0x1000, 0xcd1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:43 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f0000000040)={0x18, r9})

08:21:43 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r8}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:43 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000100))
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1556.257108][T12397] loop2: detected capacity change from 0 to 16
[ 1556.347481][T12397] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:43 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000100)={0xc, r4})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000110000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0)
close_range(r5, r8, 0x0) (async)
fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000040)=0x5)

08:21:43 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000200), 0x153000, 0x128)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000280)=0xfffffffffffff001)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:43 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x402480, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1aa4d1a98eaeb713, r9, 0x0, &(0x7f0000000300)="7ea11448ffff3387ef216e6028e4767a43b9efb7c751c6207b9dfc14aaf0c042f8d4c78aefcb91034d998a3eb7d4c2435195a38fd3a4667ef49fb5d759761fbb01cc22929c5970e5d0961f76e55258857fcdb44fad81a61b6a683d5e3b6c91565971f1d6440ea0c8c2b8afd80aad154f7483ca6dd98bf63df8059a6270b484deabed2feebcde3288ee8c998c696d7040", 0x90, 0xc4e8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18, r11})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r14, 0x3b65, 0x9)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:43 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:43 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x70b5c0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:43 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000100))
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r4}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:43 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901bcc8d45d2afc7cabb7056c9064d97b19682b175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfa75, 0x301240)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r3, 0x0, &(0x7f0000000700)="c339a8ad3e3dcf394f14eabb704403849c1dc5fe9002fc7150f6f19e963f09fdf64eb817cf59376a7149593f41233b7d13aa07566a14ab1211a386539d048fa9d41ed8f6fb5f8ba446e8dfaa60666c570b29448307fe4b0e2e28b165f3aaed8ad3ab237ab0b1ce8e135905279843e3d7157ca543d66801239b98ab908f6bde4b5dc8a56c9d7d69fa26945da5b6470616b2e2cbc274ba291e34db3756018fe31309720bc2d62febc2c6b2786ac9d4ea46f0981136b243590afa3e0e5056de751dddbfccf769110f942374bcd907ad68479f97491b07cd2822a9f9bd20ace7865d13db3f2814616d9a23871adb1de86b7f06d8c547e0b807ebcc145a7cbe54c0fc8066f3ad603cd1c7b1da91a382def4858cc81730535c232e323bb63a0f5114af6f944f4af3b5cc1968895d4caae55e2467ebecd7b3eadc253eeabdb82ac991b74bfbba7405db43a0379520ef502843634ec890bb16722f14c73ea37b03ce7a8ae644fa02e126c52d6e62edb5fa3e21e7bd8f5e46b4ad059a369701f11c30ebc420c125fdc174157c94957ad39442d1b0db7e9beb07dfd3c00a1c49434e1ef17a3f8e8ff2549a93d94793f2ac98cc84d418ecfa461b01921ae8c846b964b0fb34598f87f61e701866d7cf4bafc0b4e8308a74eee6e76879a3f2046eb263d4ebcf73d5ba36101e24bd8dd98272275fcbc509b6cd6d2f49e65ba573ff280bd020ee5d87a89412e262e230591de7b01de85f9a8b605b4910ec125c4165cd879b13bd16146d833e421cbaf237a596dfe2eca75b7add942a8f095ead30c463c53949665475d2e6c4c29cd2d6cf842dfe51295149c4b5404ba1ea3d96203f0f63d4f6069df675cef8e5ab7e29b2f914bf075316a8ab438b04de971624600083f5033c183675a72da0ec1776e490d6431457aeff6e27178f116d87271f1ae817d723eca5cfb375974a92831aa9e9c6a9aabb75fda4841197f1a0a8c201f9f9e5568557587f3c67aaf7ea90a574eeefdffc478810b1ffd35d5e2093b3fe825fda1a9fff46f82fe18b645062a03750aa24f96aeb9eb13f982ff0393c5998c42f84020b73d4381479a49c1b0bad0d1ddec9fcf61710866fbd5bd76bec5d213faa74c6253bc51e6782ca6c58a40f87181b6c7bf0e2b3555f3074516665c5b3af57527d654000839aa3f1f698292de5c70be14b31b8503e19bdb39ecbad68e6314c4282be4da9b73c71167c1c699c1728c3c1ed575a82cfb427c92b1c14debadfec0865d3b6c2abf7f53640d0f7ff9f81acaa695328a403224c5b177d115660a248010da50ffafa289c1d6b550ebfbd3f0a38401b873a6d5f6f8b0979a64b584c65ca7825455b429e86f3bdb7ce1724eeaef424786d14e7dd831b58fc84c73c76df0c10e80ca8d1d6fd94d1749c27487956f31cec4fdbc4931ae86a38106cbc8193f942eae52a2c4131edc9841284ec8a70c75087df8cc1325a95a62e36f47553d74279f82a71a00d65dccbefd1c32c6cee6b29ae55c53a0d4e6932e5fb9714f6ca7f4166bf5689109640927623f39e36227fb2492b49b75108d33bdcf3cfa0e5f016b26c1f16d7e7aed09501aedec20419fd606a1ee8351898ba26682fc5dd7df64a5d011570973d37650c47d606166076cbea527b113d898c20c54a2fa52f63e472e4b3ba7c1ad608101db34fe726e5d0475236f758beb069e7bf5692a5dffc4f6d0d36222431e32e6771b5f8cffd526124d1cb3ced0785298ad155cdf2782472a3f86090a38a8f0b23077072695713b9f364bee77ad0e9660f02599bbc4230912e1708911e8e392b647aee53ba56832a3eb4b8e889ae3ed9228d7246137de670c74da8df5ec828dd517f36d4aae26533d38a0108dc71736bc4fc5fa3d0468b47090a28f44ef41b98b2ba948533e7bf1ac3e92c057195223f877acfcfbbb7ceba258b251e635d31f5a4ee468900ed7eaeed0cca7da6859442863b815ecf1d6c78df229b303c50b7e30412ca78b7def9ea713a40b56acfc8b289cc720d8ab66eb2f4312a53feace17b82b8ef77156d3b4530a39d03f896d789a7dcca1c3619732852069fe0af952fc6e50428f2aacda3be3dc567b9f1d859ad5a848594b2afe95ac7f8878ee7e4fdbc6a5bc9556c7424cfdcf7200494c5d6eb22a118c6d30ba014c69973b8e2a36d07d164101858fc4c69d14a9e43ff7dfdc434de2139ac06bb4da263f9132b28353297d95c8a6a022bdb9440babcc73c4b43354e03fe1120c17143bc96aadab26e083d389987eb4a9d7f63f55904b9e10f0403ebcb0142b47bb85daece5732b3c70f090b8c53bc4628960bac6ab1df96b7c69bd3243afe54c4c028e5373c1db4ea710e750d448a3c0cd8a18e78606a4a9e2115ea0e628dada8782bd8fa963e7b660845ffef65acc0d8ee643d5c730b4fb4b4b65eabbf18fa5e52f89cc2b3dadf44a71ea88aa8de3a327088bd248816c72de9ec4e34eed027c4ee1b3edbd7502f10bfbaa25b8baa1325b545197399cb71701d81b58b6e85d05996b38fb19d1e6bcee708d6f000edb9dce766fd90cc77920c54c727f7b5f7554bba76086cc275e3ac6535ead6f136fe67e01e6e9fe61bb152c003eca64e028f74cfd3f5d15e4656476e4ba6c06d5524d9b5d502a4107ac4197d0a96d456c91cdbcc966c877792f20d737ef23e8557c5dfb96c15975806708cea9d7b51a0d0a2b6f0e3b38bc97907730945d2a8ce1d6387984b2aee13ad901fae6e6e19de8b168316e2ca83c65586e351dcaa7041494cc86c6258dd6c2c60bbed8314ceab1d7a7bfe798a5bc0d13c4559a3fde8acac96a94b5fc21969386f22cae3a0075ac64bb3129324ed61d8ceab31fcb6c6ebccc91135295bf346a719e1998b2cafe64119c519e7706d7246acecf3d6712ca0dcc015893a5092a933f6f575c4d3f2271a60e12eed06de3f61a659f159ef1aa1839b138980dec25d9ace9006e9ba7e89a020592ed8a6fc86cb186dbc1bcd4113c2265e50c6f4fa65241d416a0f646d9479f639a04e49bb87b4e7cceae21bae2d531686ad1635af87f58fb64152a02bea8c1212811c6529c2803ba224c3f906bca2fc7e4b309e705206c44ba95749d0baefdfd5ca55e1d4c9c61b985ce708f504292896e60b3bce3ca8648ae63ca7abb2f6c504261b31af0f1ff370c4f80f688af1451186aae33b3a568903e02dc838e7007157d13196fe371d23e13040f1e49196d32354a10c8558ab77efc01b0a18539974423c0e23f132c10d2126997b915ca61a072a5744e478c2fb61a3528230449a3a120e26fd046d89789e141e4e7bd1624dd16aeb128ff4068f90453f8edeeac848892ec75bb5128dab8e4aa84545299dc6d69e484c40c7f83c36ef72a63cc6e31bbd12e0789219d1f3044a4100655a4d55de9f9dde16321ac03c9312dad0a6829fd0fcb582f7246aa2f5ec2b299162e9f3f331f0bb4c4573d2fba6106a47084c17cb514001fdb6a94e33975018b726dec894abccf9f24f8ddf99a3f3bb5fbf2104f42d5393b3602fb5d809d87a2c0377d67e703cb289b580acdd0d404aaf382da736f43a36adb542ca9249b3d597554b8709a2fc20aaacc83cd24f9f59d070a819e9061e24d2dadf8ec8cb6b8b4c629f61e1a495eb8f1e937cfaa43a6726afd7211880b5b204b5b5075405a03b2edddb448671d040663cddab4281b425a9421d155f648fd97367c2b1c18cfc067aaab3da7db28abba25d2b6e441977582b874262e0bd0fb5be8774e42f0c609e471887f9a5f8637322c60fc768c91d33287fbb2f84cca67b1d77d873b296832c7b5441952851db77e092f3fba8dfa6aab331824222cbd8ec42175de08f1773527d0a2fab6792463a6721d4ebb843fbbdac311c1869e2f58781a6365aca7cbea1e8b2d5a7b20a62021aa9f0e5f72aa90465b8168a589bd6667509f023d0a10646065135abf26693aa89b37a8d74ea93838f863421525e84d0e971c86199ba58945ef9983f00f541ed617b3f69750473173e4227a387fcd544fbaf110341f3b4a2f217f5e8a8c264f0ed5b3eb8e882cdd8222f4e3316b808cf778360bedc827399b73f15416a007014311edeb272dc961559131ff5178cd57bee636a4d94de9509b4d2a14a8d3701f32e8082d687828f91e3e2539907ccf567e0ab3eaddb871799058acc8c9a6fde356f240769b9f1256116449dcac4efad908a6d3e81455124ecd350f858e16b1718b43a5394d001bdaf186126edbd480ad9533914d936f9446117f986fbb706c10bba9b6673eedc568f486b51a6a4688c5a27854be5d223533a664eac09bb485722abe9dcecc9e10c4e4f526901fd336890603301ad25c4024aa96e4fc8cc1f587620775162048c75b75380fe8c6c5388f54e903017734e7fa01ab519a614c4af5ffa7c5cef10813d63db20bf2bdde2f912a53026d1019b57642d6eb757d512d8b27c40c0330e7bdc43096059fe47882543ef10ada77ede68e278f9750099ac77659981e065f2cf45bbb88cf4b9cb42ea06a9e387d7db28bdbe6ebf26d90bd80c5ba4bd56802f90adc1db22a02cf12949529d31d6c8f5b6f89f0cc91f1a7c4eab4feeb6db829bbcaa507316b3d816f021d59f291f83a130a004c79f5acce521bb2c9f63007da2532d6de1d2290bc75e81de83930e18097209d2e38a0079f77fdf6ced1a80f3c478cd076ce891cfd493349a3a09ca6b033c3389597efdd093446dcfb2351ebaf12181af7bc686b8abc1a6d91d56d11bdec22e5e6a2827b097cf56a39e3e7628421d52e458303f7141ea2a2469eb9f2d9017c844b511ccb291708c82c51fbe9abc951ee7ea628f09b65ae3c12444a159ed660f3b3da29f5af3897686be2e7a22abf1f5a625a09dfdfd6ff17315ab842159a77238d3ad749c7c3033d861e89b7059a800dfedbcf23c9113a884df057c3303a32a6401f1630a2d613e7a707ce449a58ccb52b32bbf36a752ca99b35804706030c55f221460401018e44f5622ffa70530c284e61b396198da889cd7dd11dc05baec33f8ae5fc37aa593f1038afcc80a2ed31f178154c569a4106ada2b9bc545e965a0576541723aecace8d58e9d9a6dc1ec4beb806bbb199e1dc109c60e55b4368299a902c13ebe6ccd617484c9bff8355176c9bbcecc18242a7d28e924484b9658b8330539fbb9990dd50d45d7680e9c6617961e12cae5fa01edb5c7cde35fbedfc855392a5b280fd1033875a6a5e6631e63bb3b2f0cae7c7ec417ef46ee702b91105c3e46b1c1accfebef719a95a3960b4e5892d8517f7542d90887b99d0bb00d2e4da414c84f69c624c49f388aaee0e734c55af0aa9352a52d8b1e2362270d6f444b282b59e21fb8641a94bef73fa6eb7eeb16ce2b83fa1e8d32def9dbcfc2ee30430df44539a5362d5a2e5d406db27bc85598da50ecc4f73023d952f27e03cee0e9369cd11415f4fe21b5ae3782ef39d8b60a3d58635cc24c11f4113ecb0dc5b3eb454c50dcd4cbbc240944b0a8e2a4636cd20d899c404b50f4839dd33101083501ca35c64cf8911897a8dde9c1189dc4a1c4d50e8eed3348ded7b1dba54126bf9594efa50e53cab322d481bf04e16e5b8fdcf2d61dcfe8ee5a0a90856714c1888ce2ebc6dc041f1c028d17890bc30fea419caf889cecd138d68e9e2bac6bdac15f25456ac10bf807f8c62276322a98f790ddaecb22332beb6865f926f1be1b24d665b5e43309d9645c0640ce531db495e4e82628c9d392cd109fb5179eb2dfbe2b5fb34b5cb6d38075ce4e5284d0a2dced35498659e1291532d661", 0x1000, 0xcd1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:43 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x70b5c0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:43 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x402480, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1aa4d1a98eaeb713, r9, 0x0, &(0x7f0000000300)="7ea11448ffff3387ef216e6028e4767a43b9efb7c751c6207b9dfc14aaf0c042f8d4c78aefcb91034d998a3eb7d4c2435195a38fd3a4667ef49fb5d759761fbb01cc22929c5970e5d0961f76e55258857fcdb44fad81a61b6a683d5e3b6c91565971f1d6440ea0c8c2b8afd80aad154f7483ca6dd98bf63df8059a6270b484deabed2feebcde3288ee8c998c696d7040", 0x90, 0xc4e8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18, r11})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r14, 0x3b65, 0x9)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

[ 1557.018354][T12433] loop2: detected capacity change from 0 to 16
08:21:44 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f0000000040)={0x18, r9})

08:21:44 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
r7 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000200), 0x153000, 0x128)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000280)=0xfffffffffffff001)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1557.310071][ T7000] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
08:21:44 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901bcc8d45d2afc7cabb7056c9064d97b19682b175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfa75, 0x301240) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x1, r3, 0x0, &(0x7f0000000700)="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", 0x1000, 0xcd1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:44 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x70b5c0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:44 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0}) (async)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x402480, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1aa4d1a98eaeb713, r9, 0x0, &(0x7f0000000300)="7ea11448ffff3387ef216e6028e4767a43b9efb7c751c6207b9dfc14aaf0c042f8d4c78aefcb91034d998a3eb7d4c2435195a38fd3a4667ef49fb5d759761fbb01cc22929c5970e5d0961f76e55258857fcdb44fad81a61b6a683d5e3b6c91565971f1d6440ea0c8c2b8afd80aad154f7483ca6dd98bf63df8059a6270b484deabed2feebcde3288ee8c998c696d7040", 0x90, 0xc4e8}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000003c0)={0x18, r11})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0}) (async)
r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r14, 0x3b65, 0x9) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:44 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x81000)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f9d1e00000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$SNDCTL_TMR_START(r4, 0x5402)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057614f750000000000000000000000000000000080000000000000000000000000000000000000ff0000000023000000"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r8, 0x0, 0x0, 0x0, 0x4, 0x1b6fa5, 0x339bdf})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:44 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000200), 0x153000, 0x128) (async)
r7 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000200), 0x153000, 0x128)
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000280)=0xfffffffffffff001)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1557.443547][T12457] loop2: detected capacity change from 0 to 16
08:21:44 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x94802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x4, 0x2f5bf8, 0x1f9f5})

08:21:44 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:44 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x81000)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f9d1e00000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$SNDCTL_TMR_START(r4, 0x5402)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057614f750000000000000000000000000000000080000000000000000000000000000000000000ff0000000023000000"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r8, 0x0, 0x0, 0x0, 0x4, 0x1b6fa5, 0x339bdf})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x81000) (async)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x3}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f9d1e00000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$SNDCTL_TMR_START(r4, 0x5402) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057614f750000000000000000000000000000000080000000000000000000000000000000000000ff0000000023000000"]) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r8, 0x0, 0x0, 0x0, 0x4, 0x1b6fa5, 0x339bdf}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:44 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x94802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x4, 0x2f5bf8, 0x1f9f5})

08:21:44 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/ata_piix', 0x151400, 0x1cc)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r6, 0x0, &(0x7f0000000300)="98caf320255c105e95894de8d46c3c83295325ddfdbd3ab756dda4b7c4357ac1bfa1d967d2e3f23a6276e3f457093c32acd946dac7a9dafdb7653ae7d77812d05c8deb40689fb319bea001d1e152b5b793d6676f743960452747c4144113dde92721adffb0ff4063461354f50f359fd98b661163763a8d5b6560d860d76f65db1596140523d010e813e43cdad1ce4145a800e373563e5435b860760e59aff884194600abe2b80c693ed88da93c", 0xad, 0x7550})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
r9 = fcntl$dupfd(r7, 0x0, r3)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYRESOCT=r11, @ANYRESDEC=r4])
getsockopt$EBT_SO_GET_INIT_ENTRIES(r11, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x78, [0x0, 0x2, 0x6, 0x10000, 0x3f6, 0x22], 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)=""/120}, &(0x7f0000000580)=0x78)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000400)={0x7f})

[ 1557.724316][T12476] loop2: detected capacity change from 0 to 16
[ 1557.899844][T12476] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:45 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f0000000040)={0x18, r9})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f0000000040)={0x18, r9}) (async)

08:21:45 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r7=>r0, 0x6, 0x5})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r8, 0x0, &(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async, rerun: 32)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x81000) (rerun: 32)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x3}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f9d1e00000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$SNDCTL_TMR_START(r4, 0x5402) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057614f750000000000000000000000000000000080000000000000000000000000000000000000ff0000000023000000"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x7, r8, 0x0, 0x0, 0x0, 0x4, 0x1b6fa5, 0x339bdf})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:45 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0}) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/ata_piix', 0x151400, 0x1cc) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r6, 0x0, &(0x7f0000000300)="98caf320255c105e95894de8d46c3c83295325ddfdbd3ab756dda4b7c4357ac1bfa1d967d2e3f23a6276e3f457093c32acd946dac7a9dafdb7653ae7d77812d05c8deb40689fb319bea001d1e152b5b793d6676f743960452747c4144113dde92721adffb0ff4063461354f50f359fd98b661163763a8d5b6560d860d76f65db1596140523d010e813e43cdad1ce4145a800e373563e5435b860760e59aff884194600abe2b80c693ed88da93c", 0xad, 0x7550})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
r9 = fcntl$dupfd(r7, 0x0, r3)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) (async, rerun: 64)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYRESOCT=r11, @ANYRESDEC=r4]) (async)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r11, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x78, [0x0, 0x2, 0x6, 0x10000, 0x3f6, 0x22], 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)=""/120}, &(0x7f0000000580)=0x78)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1}) (async)
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000400)={0x7f}) (rerun: 64)

08:21:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x94802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x4, 0x2f5bf8, 0x1f9f5})

[ 1558.343056][T12507] loop2: detected capacity change from 0 to 16
08:21:45 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x10143, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1558.392066][T12507] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:45 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/ata_piix', 0x151400, 0x1cc)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r6, 0x0, &(0x7f0000000300)="98caf320255c105e95894de8d46c3c83295325ddfdbd3ab756dda4b7c4357ac1bfa1d967d2e3f23a6276e3f457093c32acd946dac7a9dafdb7653ae7d77812d05c8deb40689fb319bea001d1e152b5b793d6676f743960452747c4144113dde92721adffb0ff4063461354f50f359fd98b661163763a8d5b6560d860d76f65db1596140523d010e813e43cdad1ce4145a800e373563e5435b860760e59aff884194600abe2b80c693ed88da93c", 0xad, 0x7550})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
fcntl$dupfd(r7, 0x0, r3) (async)
r9 = fcntl$dupfd(r7, 0x0, r3)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYRESOCT=r11, @ANYRESDEC=r4])
getsockopt$EBT_SO_GET_INIT_ENTRIES(r11, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x78, [0x0, 0x2, 0x6, 0x10000, 0x3f6, 0x22], 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000480)=""/120}, &(0x7f0000000580)=0x78)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000400)={0x7f})

08:21:45 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r7=>r0, 0x6, 0x5}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0}) (rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r8, 0x0, &(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x5}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x10143, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1558.831806][T12536] loop2: detected capacity change from 0 to 16
08:21:45 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r7=>r0, 0x6, 0x5})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r8, 0x0, &(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x5})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x5}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r8, 0x0, &(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x5}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:45 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x10143, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x10143, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20800, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:45 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000400)={0x20, r1, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}]})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1})
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
ioctl$SNDCTL_DSP_RESET(r11, 0x5000, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

[ 1559.043626][T12552] loop2: detected capacity change from 0 to 16
08:21:45 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0xc0bb42314ee3d4ca, r14, 0x0, &(0x7f0000d4a000/0x3000)=nil, 0x3000, 0x20})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r15, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$BTRFS_IOC_RM_DEV(r15, 0x5000940b, &(0x7f0000000dc0)={{r7}, "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"})

[ 1559.094392][T12552] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:46 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:46 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl(r5, 0x1, &(0x7f0000000300)="0aae7fb4c5b445cd7294bd251de81ceb5a39c49db6d36d3fed3e294d64d23096a9818d1a78eb060fda6900c6d1ece01c5c3a110768430a2787075b839e5b49c1b2bb481429c3f55910feb0ab618906642e96f2529716defc338772fbe1023986807198da07b3edf41bd76a27ea4db5ffe33a")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0xfffffffe, 0x0, 0x38d053})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r13})
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r15})

08:21:46 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:46 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000400)={0x20, r1, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async, rerun: 32)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (rerun: 32)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1}) (async)
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
ioctl$SNDCTL_DSP_RESET(r11, 0x5000, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0}) (rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

08:21:46 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:46 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={<r4=>r2, 0x3, 0x5, 0x9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000440)={0x38, 0x5, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000006177eefe00000000000000000000000000000000000000000000000000614b1f33000000000000000000000000000000000000000000000000000000000975000000000000000000000000000000000000000000000000000000000000ff00"/124])
fcntl$getownex(r12, 0x10, &(0x7f0000000280)={0x0, <r13=>0x0})
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r13])
ioctl$IOMMU_IOAS_MAP(r11, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000000300)="107c1407d980daec686b853872dca279aadc4f349dae7f1b6880ffe89822d3a2fea1d8d7308645c20b651ffcfff5ad179eae8d0b6a3f8cdcd5129dedc08f0aa73cf01aa8f57363823afcc3e7ef29655737eeabb97f46a5183cce15b6d7c0913ee78cabff1c48a897ff085baab36d8858634c5e2344e6f1aa1de8532a467ac1492b57c133c8ea15757221e5e51f36cfc362be710309310c0cc8736557a77027a641a7bda2f37ca6570aecfa2adb6f5e5ea825d8241ede297a8ae3f0a6cac5c133dc4c96010ec64dbd7fbbba60f3a1e593fb53e95893f32ad7afbf8dc063ee51f749bc53e2389019282365f31c104cf0", 0xef, 0x400})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:46 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl(r5, 0x1, &(0x7f0000000300)="0aae7fb4c5b445cd7294bd251de81ceb5a39c49db6d36d3fed3e294d64d23096a9818d1a78eb060fda6900c6d1ece01c5c3a110768430a2787075b839e5b49c1b2bb481429c3f55910feb0ab618906642e96f2529716defc338772fbe1023986807198da07b3edf41bd76a27ea4db5ffe33a")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0xfffffffe, 0x0, 0x38d053}) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r13}) (async)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r15})

08:21:46 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000400)={0x20, r1, 0x5, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}]})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1}) (async, rerun: 64)
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) (rerun: 64)
ioctl$SNDCTL_DSP_RESET(r11, 0x5000, 0x0) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

08:21:46 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={<r4=>r2, 0x3, 0x5, 0x9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000440)={0x38, 0x5, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0}) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000006177eefe00000000000000000000000000000000000000000000000000614b1f33000000000000000000000000000000000000000000000000000000000975000000000000000000000000000000000000000000000000000000000000ff00"/124]) (async)
fcntl$getownex(r12, 0x10, &(0x7f0000000280)={0x0, <r13=>0x0})
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r13])
ioctl$IOMMU_IOAS_MAP(r11, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000000300)="107c1407d980daec686b853872dca279aadc4f349dae7f1b6880ffe89822d3a2fea1d8d7308645c20b651ffcfff5ad179eae8d0b6a3f8cdcd5129dedc08f0aa73cf01aa8f57363823afcc3e7ef29655737eeabb97f46a5183cce15b6d7c0913ee78cabff1c48a897ff085baab36d8858634c5e2344e6f1aa1de8532a467ac1492b57c133c8ea15757221e5e51f36cfc362be710309310c0cc8736557a77027a641a7bda2f37ca6570aecfa2adb6f5e5ea825d8241ede297a8ae3f0a6cac5c133dc4c96010ec64dbd7fbbba60f3a1e593fb53e95893f32ad7afbf8dc063ee51f749bc53e2389019282365f31c104cf0", 0xef, 0x400}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:46 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

[ 1559.727519][T12592] loop2: detected capacity change from 0 to 16
[ 1559.800548][T12592] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:46 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl(r5, 0x1, &(0x7f0000000300)="0aae7fb4c5b445cd7294bd251de81ceb5a39c49db6d36d3fed3e294d64d23096a9818d1a78eb060fda6900c6d1ece01c5c3a110768430a2787075b839e5b49c1b2bb481429c3f55910feb0ab618906642e96f2529716defc338772fbe1023986807198da07b3edf41bd76a27ea4db5ffe33a")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, <r9=>0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r9, 0x0, 0x10001, 0x0, 0xfffffffe, 0x0, 0x38d053}) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000001c0)={0x18, r13})
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r15})

08:21:47 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0xc0bb42314ee3d4ca, r14, 0x0, &(0x7f0000d4a000/0x3000)=nil, 0x3000, 0x20}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r15, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$BTRFS_IOC_RM_DEV(r15, 0x5000940b, &(0x7f0000000dc0)={{r7}, "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"})

08:21:47 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x3)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={<r4=>r2, 0x3, 0x5, 0x9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000440)={0x38, 0x5, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) (async, rerun: 32)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0}) (async, rerun: 64)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 64)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020007000000030001000000006177eefe00000000000000000000000000000000000000000000000000614b1f33000000000000000000000000000000000000000000000000000000000975000000000000000000000000000000000000000000000000000000000000ff00"/124])
fcntl$getownex(r12, 0x10, &(0x7f0000000280)={0x0, <r13=>0x0})
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r13]) (async, rerun: 64)
ioctl$IOMMU_IOAS_MAP(r11, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000000300)="107c1407d980daec686b853872dca279aadc4f349dae7f1b6880ffe89822d3a2fea1d8d7308645c20b651ffcfff5ad179eae8d0b6a3f8cdcd5129dedc08f0aa73cf01aa8f57363823afcc3e7ef29655737eeabb97f46a5183cce15b6d7c0913ee78cabff1c48a897ff085baab36d8858634c5e2344e6f1aa1de8532a467ac1492b57c133c8ea15757221e5e51f36cfc362be710309310c0cc8736557a77027a641a7bda2f37ca6570aecfa2adb6f5e5ea825d8241ede297a8ae3f0a6cac5c133dc4c96010ec64dbd7fbbba60f3a1e593fb53e95893f32ad7afbf8dc063ee51f749bc53e2389019282365f31c104cf0", 0xef, 0x400}) (rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:47 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r18, 0x0, 0x9, 0x6})

08:21:47 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:47 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x10b102, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0))
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000cb5000/0x2000)=nil, 0x2000, 0xeaa})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r9, 0x0, &(0x7f0000d15000/0x4000)=nil, 0x4000, 0x5})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, <r12=>0xffffffffffffffff, 0x1})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r12, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x2ca80b})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f00000001c0)={0x18, r16})
ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r4, r16, 0x3ad4d5, 0x1c000000000000, 0x2, 0xd5b1b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1560.369454][T12625] loop2: detected capacity change from 0 to 16
08:21:47 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r0, 0x3a75c000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
writev(r1, &(0x7f0000000100), 0x7)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1560.414973][T12625] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
dup2(r0, r1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:47 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x10b102, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000cb5000/0x2000)=nil, 0x2000, 0xeaa}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r9, 0x0, &(0x7f0000d15000/0x4000)=nil, 0x4000, 0x5}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, <r12=>0xffffffffffffffff, 0x1})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r12, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x2ca80b})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f00000001c0)={0x18, r16}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r4, r16, 0x3ad4d5, 0x1c000000000000, 0x2, 0xd5b1b}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:47 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (rerun: 64)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r18, 0x0, 0x9, 0x6})

[ 1560.637173][T12641] loop2: detected capacity change from 0 to 16
[ 1560.652699][T12641] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:47 executing program 3:
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x4e23, @private=0xa010100}})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:47 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r0, 0x3a75c000)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
writev(r1, &(0x7f0000000100), 0x7)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:47 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0xc0bb42314ee3d4ca, r14, 0x0, &(0x7f0000d4a000/0x3000)=nil, 0x3000, 0x20})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async, rerun: 64)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r15, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$BTRFS_IOC_RM_DEV(r15, 0x5000940b, &(0x7f0000000dc0)={{r7}, "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"})

08:21:47 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x10b102, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000cb5000/0x2000)=nil, 0x2000, 0xeaa}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r9, 0x0, &(0x7f0000d15000/0x4000)=nil, 0x4000, 0x5}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11, 0x0, <r12=>0xffffffffffffffff, 0x1}) (async)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r14, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r12, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x2ca80b}) (async)
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f00000001c0)={0x18, r16})
ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r4, r16, 0x3ad4d5, 0x1c000000000000, 0x2, 0xd5b1b}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
dup2(r0, r1) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:48 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r0, 0x3a75c000) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0}) (async)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
writev(r1, &(0x7f0000000100), 0x7)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:48 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="0000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}]}) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r18, 0x0, 0x9, 0x6})

08:21:48 executing program 3:
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x4e23, @private=0xa010100}}) (async, rerun: 32)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1561.299773][T12676] loop2: detected capacity change from 0 to 16
08:21:48 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
dup2(r0, r1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
dup2(r0, r1) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:48 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:48 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r14, 0x0, &(0x7f0000c2a000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:48 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x11)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000051}, 0x40006)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0x1, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r8, 0x3b65, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

[ 1561.538917][T12693] loop2: detected capacity change from 0 to 16
08:21:48 executing program 3:
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x4e23, @private=0xa010100}})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x4e23, @private=0xa010100}}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

[ 1561.586218][T12693] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:48 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000300)={0x38, 0x5, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r6})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x1, r10, 0x0, 0x6, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:48 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x11)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000051}, 0x40006) (async)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0x1, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r8, 0x3b65, 0x0) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:48 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:48 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r2})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r14, 0x0, &(0x7f0000c2a000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:48 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async)
r2 = creat(&(0x7f0000000200)='./file0\x00', 0x11)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000051}, 0x40006) (async)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0x1, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r8, 0x3b65, 0x0) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:48 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x200200)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:49 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000300)={0x38, 0x5, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r6})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x1, r10, 0x0, 0x6, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:49 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000200)={0x18, r6, 0x7, 0x9537})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28a201, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})

[ 1562.151840][T12734] loop2: detected capacity change from 0 to 16
08:21:49 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1562.249726][T12734] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:49 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:49 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000100)={0x18, r2}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async, rerun: 32)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f00000001c0)={0x18, r14}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r14, 0x0, &(0x7f0000c2a000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:49 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x200200)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:49 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000300)={0x38, 0x5, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r6}) (async, rerun: 32)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x38, 0x1, r10, 0x0, 0x6, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:49 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$USBDEVFS_RESET(r0, 0x5514) (async)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000200)={0x18, r6, 0x7, 0x9537}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28a201, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:49 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1562.683220][T12753] loop2: detected capacity change from 0 to 16
08:21:49 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async, rerun: 64)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000200)={0x18, r6, 0x7, 0x9537}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28a201, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:49 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x200200)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x200200) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:49 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:49 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000001c0)={0x18, r10})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x7, 0x1aef71, 0x26095e})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

08:21:49 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r8, 0x0, &(0x7f0000000740)="7b92068302a4008ab688709d20842647cf6648998808c37a528cfd377054a5e278afdf94c3500c410fe933f0ecd8d7e0a3bcfcbeaf07c4c2f94d5c47b293a9a2ed9f222a7726033d0395552c59f2b28a235a4286f006fcf4264f6ff8ca5fc7d8d8ec3d7edf2aea8f34b3cb4dd1491e4ea6912b16653d55d1f6c3c5affe073ba1a6473e5401d7ac3f7d11a24e2ec56661069ec58723cb4db7c4467ba40feb323af6c8106f7655ed279cbf9ece0151534c5b2a196499416812dbb28aa75bc0c51e80a69945853447e507f5c6b8bd741c3b4d9b999651cc3ad2072f40c5dc9a1baec7c5cdbe0265569322bf75", 0xeb, 0x7f})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc})
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r10=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r9, 0xc01064c1, &(0x7f0000000200)={0x0, 0x0, <r11=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x8001, 0x960b, 0x8, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x6, 0x1, 0x7ea5, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000d5a000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18})

08:21:49 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x5, 0x9, 0x0, 0x0, 0x7, 0x7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x800)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:49 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r1})
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r7})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

[ 1562.981311][T12785] loop2: detected capacity change from 0 to 16
[ 1562.988739][T12785] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:49 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0}) (rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r8, 0x0, &(0x7f0000000740)="7b92068302a4008ab688709d20842647cf6648998808c37a528cfd377054a5e278afdf94c3500c410fe933f0ecd8d7e0a3bcfcbeaf07c4c2f94d5c47b293a9a2ed9f222a7726033d0395552c59f2b28a235a4286f006fcf4264f6ff8ca5fc7d8d8ec3d7edf2aea8f34b3cb4dd1491e4ea6912b16653d55d1f6c3c5affe073ba1a6473e5401d7ac3f7d11a24e2ec56661069ec58723cb4db7c4467ba40feb323af6c8106f7655ed279cbf9ece0151534c5b2a196499416812dbb28aa75bc0c51e80a69945853447e507f5c6b8bd741c3b4d9b999651cc3ad2072f40c5dc9a1baec7c5cdbe0265569322bf75", 0xeb, 0x7f})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc})
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r10=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r9, 0xc01064c1, &(0x7f0000000200)={0x0, 0x0, <r11=>0xffffffffffffffff}) (rerun: 32)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x8001, 0x960b, 0x8, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x6, 0x1, 0x7ea5, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000d5a000/0x3000)=nil, 0x3000}) (async, rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18}) (rerun: 64)

[ 1563.100495][T12794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1563.114319][T12794] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:50 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r1})
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r7})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r1}) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r7}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)

08:21:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:50 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r8, 0x0, &(0x7f0000000740)="7b92068302a4008ab688709d20842647cf6648998808c37a528cfd377054a5e278afdf94c3500c410fe933f0ecd8d7e0a3bcfcbeaf07c4c2f94d5c47b293a9a2ed9f222a7726033d0395552c59f2b28a235a4286f006fcf4264f6ff8ca5fc7d8d8ec3d7edf2aea8f34b3cb4dd1491e4ea6912b16653d55d1f6c3c5affe073ba1a6473e5401d7ac3f7d11a24e2ec56661069ec58723cb4db7c4467ba40feb323af6c8106f7655ed279cbf9ece0151534c5b2a196499416812dbb28aa75bc0c51e80a69945853447e507f5c6b8bd741c3b4d9b999651cc3ad2072f40c5dc9a1baec7c5cdbe0265569322bf75", 0xeb, 0x7f}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc})
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) (async, rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r10=>0x0}) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r9, 0xc01064c1, &(0x7f0000000200)={0x0, 0x0, <r11=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x8001, 0x960b, 0x8, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x6, 0x1, 0x7ea5, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000d5a000/0x3000)=nil, 0x3000}) (async, rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18}) (rerun: 64)

08:21:50 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18})
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r11, r18, 0x3f863e, 0x9, 0x3, 0x7aa8e})

[ 1563.353531][T12809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1563.365781][T12810] loop2: detected capacity change from 0 to 16
[ 1563.379376][T12809] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:50 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x7, 0x1aef71, 0x26095e})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

08:21:50 executing program 4:
open(0x0, 0x0, 0x0) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x5, 0x9, 0x0, 0x0, 0x7, 0x7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x800) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1563.440464][T12810] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:50 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000200)={0xc, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000280)={0x38, 0x2, r1}) (async)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r7}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:50 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:50 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000001c0)={0x18, r10})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r10, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r2, 0x0, 0x0, 0x0, 0x7, 0x1aef71, 0x26095e})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r12})

08:21:50 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x5, 0x9, 0x0, 0x0, 0x7, 0x7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020014}, 0x800)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:50 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1}) (async)
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r11, r18, 0x3f863e, 0x9, 0x3, 0x7aa8e})

[ 1563.770195][T12837] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1563.824133][T12837] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:50 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:50 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r9, 0x0, &(0x7f0000000300)="66d9a0535e9a3a2129e72d2e01febd645e812921a02117b6e2899c14536015b0eb12bfbab7605e87859e6958512a0e17d799454361dd5040eb7e0926f78d0990ddae661a4279ae7ff10733dd06d98a1260b98d086ccdf22500410741a26565fe6df965d7d766ef2984b93c578c", 0x6d, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

[ 1563.938148][T12854] loop2: detected capacity change from 0 to 16
[ 1563.953097][T12841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1564.027723][T12839] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:51 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x4}}, './file0\x00'}) (async, rerun: 32)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r14=>0xffffffffffffffff, 0x1})
r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r15, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r16, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r14, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 64)
r17 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r17, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r18=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r18}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r11, r18, 0x3f863e, 0x9, 0x3, 0x7aa8e})

08:21:51 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8}) (async, rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:51 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3c, 0x5b, "38e6cb78f69e739162f6ab0812fe5a096194e72adab954967a707d1cb16700928ee82ffe96ee0c32bf39fc86e833446bcaa762c4ef71b415"}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '#'}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008880)
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, <r11=>0xffffffffffffffff, 0x1})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r13, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r11, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r15})

08:21:51 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:51 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:51 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r9, 0x0, &(0x7f0000000300)="66d9a0535e9a3a2129e72d2e01febd645e812921a02117b6e2899c14536015b0eb12bfbab7605e87859e6958512a0e17d799454361dd5040eb7e0926f78d0990ddae661a4279ae7ff10733dd06d98a1260b98d086ccdf22500410741a26565fe6df965d7d766ef2984b93c578c", 0x6d, 0x7}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

[ 1564.416502][T12877] loop2: detected capacity change from 0 to 16
08:21:51 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYBLOB, @ANYRES16=r6, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
fchown(r4, 0xee00, r7)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r11, 0x0, 0x8000, 0x0, 0x7, 0x1b1923, 0xb555})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:51 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233e1d1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e01d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e2976833ef73c2713720500be9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525c01d76e3b93e86c0a1b267f76eab31e678b1c7a638b0fa03dce1eb7b3e32cc8ce352c402b0f86d974111ecf6b1cc7c74f9b5d9db435cbe25c32f6a236eb9a876d32def739dec062c1031338f3de89a0080d1a6b2e0850c6b454f68c2e3dd6e0ca3937488c50423c2002df0539444a6010be6a305ecec6b00"/269, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000100)={0x822b, 0x2, @name="dd827c6bf8ccb39495158ca783b5c28a138501a92819f16e7bdf2f0107925317"})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1564.530125][T12887] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:51 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r9, 0x0, &(0x7f0000000300)="66d9a0535e9a3a2129e72d2e01febd645e812921a02117b6e2899c14536015b0eb12bfbab7605e87859e6958512a0e17d799454361dd5040eb7e0926f78d0990ddae661a4279ae7ff10733dd06d98a1260b98d086ccdf22500410741a26565fe6df965d7d766ef2984b93c578c", 0x6d, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r9, 0x0, &(0x7f0000000300)="66d9a0535e9a3a2129e72d2e01febd645e812921a02117b6e2899c14536015b0eb12bfbab7605e87859e6958512a0e17d799454361dd5040eb7e0926f78d0990ddae661a4279ae7ff10733dd06d98a1260b98d086ccdf22500410741a26565fe6df965d7d766ef2984b93c578c", 0x6d, 0x7}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)

08:21:51 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r8}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:51 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3c, 0x5b, "38e6cb78f69e739162f6ab0812fe5a096194e72adab954967a707d1cb16700928ee82ffe96ee0c32bf39fc86e833446bcaa762c4ef71b415"}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '#'}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008880)
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, <r11=>0xffffffffffffffff, 0x1})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r13, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r11, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r15})

[ 1564.680293][T12887] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1564.705879][T12893] loop3: detected capacity change from 0 to 16
08:21:51 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1564.765522][T12896] loop2: detected capacity change from 0 to 16
[ 1564.784039][T12893] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1564.803270][T12896] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:51 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x58, 0x0, 0x100, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x3c, 0x5b, "38e6cb78f69e739162f6ab0812fe5a096194e72adab954967a707d1cb16700928ee82ffe96ee0c32bf39fc86e833446bcaa762c4ef71b415"}]}, 0x58}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '#'}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008880) (async)
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r10, 0x0, <r11=>0xffffffffffffffff, 0x1})
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r13, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r11, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r9, 0x3b86, &(0x7f00000001c0)={0x18, r15})

08:21:51 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0x5, 0x78}}, './file0\x00'})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000100)={0xc, r9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

[ 1564.922404][T12912] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1564.974089][T12909] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:51 executing program 4:
open(0x0, 0x143803, 0x10)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
open(&(0x7f0000000100)='./file0\x00', 0x90000, 0x62)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:51 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x540800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:51 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2, {0x80000000, 0x6fbe}}, './file0\x00'})
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x3, 0x3b85e8, 0x344da5})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x10080, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1565.059300][T12893] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1565.079252][T12926] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="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"/269, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000100)={0x822b, 0x2, @name="dd827c6bf8ccb39495158ca783b5c28a138501a92819f16e7bdf2f0107925317"})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1565.158411][T12893] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1565.273410][T12936] loop2: detected capacity change from 0 to 16
08:21:52 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r5, &(0x7f0000000000)) (async)
fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYBLOB, @ANYRES16=r6, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
fchown(r4, 0xee00, r7)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r11, 0x0, 0x8000, 0x0, 0x7, 0x1b1923, 0xb555})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:52 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0x5, 0x78}}, './file0\x00'})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000100)={0xc, r9}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="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"/269, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000100)={0x822b, 0x2, @name="dd827c6bf8ccb39495158ca783b5c28a138501a92819f16e7bdf2f0107925317"})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="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"/269, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) (async)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000100)={0x822b, 0x2, @name="dd827c6bf8ccb39495158ca783b5c28a138501a92819f16e7bdf2f0107925317"}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:52 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2, {0x80000000, 0x6fbe}}, './file0\x00'}) (async, rerun: 64)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0) (rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x3, 0x3b85e8, 0x344da5})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x10080, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:52 executing program 4:
open(0x0, 0x143803, 0x10)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
open(&(0x7f0000000100)='./file0\x00', 0x90000, 0x62) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:52 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x540800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1565.578499][T12948] loop3: detected capacity change from 0 to 16
[ 1565.594791][T12948] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1565.626190][T12951] loop2: detected capacity change from 0 to 16
[ 1565.654511][T12951] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:52 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x540800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:52 executing program 4:
open(0x0, 0x143803, 0x10)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
open(&(0x7f0000000100)='./file0\x00', 0x90000, 0x62) (async)
open(&(0x7f0000000100)='./file0\x00', 0x90000, 0x62)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1565.743151][T12948] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:52 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0x78}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0, {0x5, 0x78}}, './file0\x00'})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000100)={0xc, r9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r7})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:52 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2, {0x80000000, 0x6fbe}}, './file0\x00'})
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x111000, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x7, r4, 0x0, 0x1, 0x0, 0x3, 0x3b85e8, 0x344da5})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x10080, 0x0) (async)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x10080, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:52 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async)
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r5, &(0x7f0000000000)) (async)
fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYBLOB, @ANYRES16=r6, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
fchown(r4, 0xee00, r7) (async)
fchown(r4, 0xee00, r7)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r11, 0x0, 0x8000, 0x0, 0x7, 0x1b1923, 0xb555}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r11, 0x0, 0x8000, 0x0, 0x7, 0x1b1923, 0xb555})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r13})

08:21:53 executing program 2:
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0, {0x5, 0x240000}}, './file1/file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r7, 0x0, &(0x7f0000f04000/0x1000)=nil, 0x1000, 0xffffffffffffffff})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1566.218625][T12991] loop3: detected capacity change from 0 to 16
08:21:53 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1566.277787][T12991] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1566.317223][T12995] loop2: detected capacity change from 0 to 16
08:21:53 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000300)="c7ab326f0b52fe41920dd551b482f8e49f43bc9a226efe7803c00e6c32a63a884b74650242db19d73e95b8d2608f17bd715e0a9cd1794649222bf09c1f9fd017c1c74de7c4d2b0f573f918c80356336891123606b9ef353179a0bb63e819809c8cfd7e149bac603ed55c797f8f02", 0x6e, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1566.393559][T12995] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
[ 1566.459225][T12992] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1566.519480][T12998] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1566.540939][T12991] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1566.589462][T12992] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:53 executing program 0:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:53 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000500)={{r0}, 0x20200000, 0x1, 0x4})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[{0x0, 0x8, 0x5, 0x4}, {0x2, 0x7f, 0x0, 0x20}, {0x67, 0x1f, 0xe1, 0xfffffff8}, {0x40, 0x3, 0x8, 0x3}, {0x0, 0xe1, 0x33, 0x7fffffff}, {0x3f, 0x6, 0x27}, {0x8, 0x81, 0xff, 0x5}]})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x0, 0xee00}}, './file0\x00'})
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000540)={'raw\x00', 0x0, [0x10001, 0x10001, 0x7, 0xb0f, 0x8]}, &(0x7f00000005c0)=0x54)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11})
recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001002000ebef0c35c4c98eca2de16360be7b187893fe310c7ce947eb5d4f1e289ceb2ad72eed43a351bf22b1ba8007203e712d087c6697", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=r2, @ANYRES32], 0x78}, 0x140)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x68, r8})

08:21:53 executing program 2:
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0, {0x5, 0x240000}}, './file1/file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r7, 0x0, &(0x7f0000f04000/0x1000)=nil, 0x1000, 0xffffffffffffffff}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:53 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x3e36a453})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x7, 0x1, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:53 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x388cd1e9a1b1602f, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r8, 0x0, &(0x7f0000e8a000/0x4000)=nil, 0x4000, 0x1000})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r9})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0xfffffffffffffd4f, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r14, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_COPY$syz(r10, 0x3b83, &(0x7f0000000040)={0x28, 0x10000, r2, r15, 0x1c5b56, 0x8, 0x4, 0x324ab3})
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r16})

08:21:53 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000300)="c7ab326f0b52fe41920dd551b482f8e49f43bc9a226efe7803c00e6c32a63a884b74650242db19d73e95b8d2608f17bd715e0a9cd1794649222bf09c1f9fd017c1c74de7c4d2b0f573f918c80356336891123606b9ef353179a0bb63e819809c8cfd7e149bac603ed55c797f8f02", 0x6e, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:53 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x3e36a453})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x7, 0x1, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

[ 1566.938815][T13014] loop2: detected capacity change from 0 to 16
[ 1566.963924][T13014] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:53 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x388cd1e9a1b1602f, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r8, 0x0, &(0x7f0000e8a000/0x4000)=nil, 0x4000, 0x1000})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0xfffffffffffffd4f, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0}) (rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (rerun: 64)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r14, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r10, 0x3b83, &(0x7f0000000040)={0x28, 0x10000, r2, r15, 0x1c5b56, 0x8, 0x4, 0x324ab3}) (async)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r16})

08:21:53 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000300)="c7ab326f0b52fe41920dd551b482f8e49f43bc9a226efe7803c00e6c32a63a884b74650242db19d73e95b8d2608f17bd715e0a9cd1794649222bf09c1f9fd017c1c74de7c4d2b0f573f918c80356336891123606b9ef353179a0bb63e819809c8cfd7e149bac603ed55c797f8f02", 0x6e, 0x4})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:54 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x5}}, './file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r1}) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:54 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r0, {0x5, 0x240000}}, './file1/file0\x00'})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r7, 0x0, &(0x7f0000f04000/0x1000)=nil, 0x1000, 0xffffffffffffffff}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r7, 0x0, &(0x7f0000f04000/0x1000)=nil, 0x1000, 0xffffffffffffffff})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:54 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x3e36a453})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x7, 0x1, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:54 executing program 4:
r0 = open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r6 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 32)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000500)={{r0}, 0x20200000, 0x1, 0x4})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[{0x0, 0x8, 0x5, 0x4}, {0x2, 0x7f, 0x0, 0x20}, {0x67, 0x1f, 0xe1, 0xfffffff8}, {0x40, 0x3, 0x8, 0x3}, {0x0, 0xe1, 0x33, 0x7fffffff}, {0x3f, 0x6, 0x27}, {0x8, 0x81, 0xff, 0x5}]}) (rerun: 32)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async, rerun: 32)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x0, 0xee00}}, './file0\x00'}) (async)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000540)={'raw\x00', 0x0, [0x10001, 0x10001, 0x7, 0xb0f, 0x8]}, &(0x7f00000005c0)=0x54) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11})
recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001002000ebef0c35c4c98eca2de16360be7b187893fe310c7ce947eb5d4f1e289ceb2ad72eed43a351bf22b1ba8007203e712d087c6697", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=r2, @ANYRES32], 0x78}, 0x140)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x68, r8})

08:21:54 executing program 5:
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r0, 0x0, <r1=>0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5})

[ 1567.322903][T13038] loop2: detected capacity change from 0 to 16
08:21:54 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x81})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:54 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x388cd1e9a1b1602f, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r8, 0x0, &(0x7f0000e8a000/0x4000)=nil, 0x4000, 0x1000}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0xfffffffffffffd4f, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1}) (async)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r12, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r14, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_COPY$syz(r10, 0x3b83, &(0x7f0000000040)={0x28, 0x10000, r2, r15, 0x1c5b56, 0x8, 0x4, 0x324ab3}) (async)
ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r16=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r16})

08:21:54 executing program 5:
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r0, 0x0, <r1=>0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)

08:21:54 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000500)={{r0}, 0x20200000, 0x1, 0x4})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[{0x0, 0x8, 0x5, 0x4}, {0x2, 0x7f, 0x0, 0x20}, {0x67, 0x1f, 0xe1, 0xfffffff8}, {0x40, 0x3, 0x8, 0x3}, {0x0, 0xe1, 0x33, 0x7fffffff}, {0x3f, 0x6, 0x27}, {0x8, 0x81, 0xff, 0x5}]})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x0, 0xee00}}, './file0\x00'})
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000540)={'raw\x00', 0x0, [0x10001, 0x10001, 0x7, 0xb0f, 0x8]}, &(0x7f00000005c0)=0x54)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r11})
recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001002000ebef0c35c4c98eca2de16360be7b187893fe310c7ce947eb5d4f1e289ceb2ad72eed43a351bf22b1ba8007203e712d087c6697", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=r2, @ANYRES32], 0x78}, 0x140) (async)
recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f0000000040)=""/4, 0x4}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001002000ebef0c35c4c98eca2de16360be7b187893fe310c7ce947eb5d4f1e289ceb2ad72eed43a351bf22b1ba8007203e712d087c6697", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=r2, @ANYRES32], 0x78}, 0x140)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x68, r8}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x68, r8})

08:21:54 executing program 5:
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r0, 0x0, <r1=>0xffffffffffffffff, 0x1}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='\x00', 0x10d0005, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYBLOB="bae559d51b6db4250c442d99ece62184bd34756859ebeabc6611ce51630276291fd08e", @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000300)="$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")
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:54 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x81})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x81}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

[ 1567.871676][T13074] loop2: detected capacity change from 0 to 16
08:21:54 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000200)={0x20, r6, 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:54 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:54 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})

08:21:55 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5d0267b10e206a8217c922055552be81eaf886b42869f3f8e1445b13260f484ffc8469058df4c4a4af", 0x29, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="c37ec9d2cdb1c46a44e105fb9be61534154a1a6245b76f11b6032b5992f071d7cc516e211d68614485d229e762d43284", 0x30, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000300)="78741f807c0bb2c84ed51ab928b1395239389d5913fcefd42c24fdb325f39d781852b8f4c2e18bfbb1072e2172445f41757f2984de895e3788c7afc1a68605c269527c84b41d0beb4871867d8de0956788b0838fabf531e80f766d1ce8591f0242eec833c6ff9e92d95594121ab809ba60a5f72f29b48786d837b674523934c76c4579ac0ac61d0280fd9125f4e729eab612f9ee633b9df3a617b232084d4f3236bc69cf2e0ffc49200c0c052a37db2a1facd87ca0f129f0f4d04eea1abde08bede0e353180be11a37112d3ab871", 0xce, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[r0, r1, r2, 0x0, 0x0, r3, 0x0], 0x7, 0x81800, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000540)={0x2, <r13=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, <r14=>0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x2, 0x6})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000009c0)={0x28, 0x2, r6, 0x0, 0xcf623, 0x4, 0x5, 0x7732f})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000007c0)={0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r16 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r17=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r17, <r18=>0x0})
pipe(&(0x7f0000000880)={<r19=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r19, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x58, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x6, @private0, 0xa37}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000980)=0x10)
ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f0000000440)={r18})
ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000800)={&(0x7f0000000740)=[0x0, r14, 0x0], 0x3, r15, r18, 0x4, 0x7, 0x1, 0x10001, {0xd9, 0x1, 0xbcf, 0x8, 0x1f, 0x5, 0xf8ce, 0x694f, 0x1000, 0x7fff, 0x9, 0x200, 0xffff, 0xac5, "e10951a9230ac5d05cc99db4613b8305e3a9afb0710dbfe46e284f07526b1aee"}})
splice(r12, &(0x7f0000000500)=0x3ff, r13, &(0x7f0000000580)=0x6, 0x800, 0x8)
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:55 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009baa57614f7500000000000000000000000000000000000000000000000000000000000000000000ff00b6df6dd36e105a81daa115f8a051cd53ef27b68f14e20a4068fcba8b28c66f7131c875fd115a15fb46bd315ce3948bdc71dce8baf6f1d40551d62e4bf22e68a2d4014435e9f419d6b854ae0c566504c4922a2de8505232a78c208cbba898973b9dece0b27805cb71"])
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB, @ANYRES16=r3, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = syz_open_dev$sndpcmc(&(0x7f0000000880), 0x4, 0x100)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x41, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x22000, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r5, @ANYRESHEX])
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)="f494e5f60405883ccf39705c4ec07a5513b24fb0b059d683ce9dc48b18f1b2b442676b8f6dafd619d192799154bc22804a0f112502a54022ddd741a2873a50599afc49ff8768be57af06f560b9bae9b3d9bed840c8", 0x55}, {&(0x7f0000000200)="fe71cc7c04dbac9fef49fbf0e284f141e1572f4c3825eb2cc6e2b78974d838c0581040a5d2e5", 0x26}, {&(0x7f00000004c0)="ff7b70d74638243fb70838fa3a1a60e667524a94ed732803480a463637bee66f39a2872f522824e893af8eb873c19098295c32072f685c53b6ba8181dfca958661bbd4e0964b14ba71bbf409704d13f6a99fc3d8c793dda0f431fa3de64fd87227141499401af0e46daccdc5eea818c86dc0fb28537178f5be924deed3905a2aea1f93f41ed683755933e17d274886b2ede10b290a9ddb907ca5d56d7fffdcf603f1faa6c858053d074adf6caef9b17d84ea233f9a58606f18b354dae2c652f6eb5a74fa7c536b48db", 0xc9}, {&(0x7f0000000280)="7306e57d5a35530d35ec5d3d732d1d85aac633e7064af7a7ff8637ab6d1241aca0e6dfe45141a8c172", 0x29}, {&(0x7f00000005c0)="2ac16f9200ade4c596122fcd4f17b3b77745c60ab54eb4f0b68f9578a14a5ba553594e5a4dccfe0f73e71457515edade3e27b941751fe1afd663cf4789ae1c713503f926946cc0b6efa48557f91495b8003676554ec00756635eca6b92ee8f5fbd9ae4e49bd4c0ebe296b73045460120c92b57b7ccc6de850d8491232f2f3f8d8a634c00a546ed3f67df6cf819c1a7704b23987ca297482e52cf8782835458d33fdafa3e73e014f671cce7481e3d33b930b11bb22a21e9942f5e1df51f27e734de219ea777ed9019f0", 0xc9}, {&(0x7f00000006c0)="da2fa7505bfe07c83c66a5b0fcee11114df93521bd2c9b", 0x17}, {&(0x7f0000000700)="fa7963513a589572bc97add07cde00ffd9e537b6fb507e8255d56ff82b325e5528464fe0ae58988c4bfe42bb152bb581f7f3d6bb14d40e71f48af81acc005a0fe8b039b516fe36f9f9619bb313084301a5bde8b4afd80e785d4caabb2c95ed150f2babc7465338cb8f74a1813c1f12c033a36d78185e8fba6da6f9a6095c08588907d2d43510a4b62d4768f5941ffefcba283e2d2aa5a36e494a2a0f628f76b335172794b4e44b5318d33d191bc0c235df179b9ae79b6075145e2bcda47746371eaaea26b01ecd970f", 0xc9}], 0x7, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r5, r0, r1, r6, r1, r0, r7, r8]}}, @rights={{0x28, 0x1, 0x1, [r9, r0, r0, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r10, r0, r1]}}], 0x98, 0x20000080}}], 0x1, 0x4800)
r11 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x3, r14, 0x0, 0x11fffffffffd, 0xb2, &(0x7f0000000300)="bd9496c76611ff9a3ff86dd71f2bdcd21f3ba8011782a1daa7b3e408ae76e91ca205ed5f0bbbc2deeabadfde0d38894f56790b6195340a3b25afc2583b6c3b61b27916ab50e03f8da1eda16c4ae6f0b391b61b8351d1392a1dd2f5ac166718ad435dff2588444ebd09cdb38e9d22428737586eb4be35f6db703c78e416e8c7045dd317ffffe277da8959a80d39ef56de55605e78fff8abc9cf977141e372024661acfe0df983a3ba87d6274dffb4c4f38d87"})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r15=>0xffffffffffffffff, 0x1})
r16 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r16, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r17=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r17, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r15, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r18 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r18, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r19=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r19})

08:21:55 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)

08:21:55 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r5, 0x0, &(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x81}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='\x00', 0x10d0005, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYBLOB="bae559d51b6db4250c442d99ece62184bd34756859ebeabc6611ce51630276291fd08e", @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000300)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y") (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1568.320540][T13097] loop4: detected capacity change from 0 to 16
[ 1568.390104][T13097] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1568.421217][T13103] loop2: detected capacity change from 0 to 16
08:21:55 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000200)={0x20, r6, 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1568.439357][T13097] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:55 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000dfd000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1568.510660][T13113] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
[ 1568.574915][T13097] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:55 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5d0267b10e206a8217c922055552be81eaf886b42869f3f8e1445b13260f484ffc8469058df4c4a4af", 0x29, <r0=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="c37ec9d2cdb1c46a44e105fb9be61534154a1a6245b76f11b6032b5992f071d7cc516e211d68614485d229e762d43284", 0x30, <r1=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000300)="78741f807c0bb2c84ed51ab928b1395239389d5913fcefd42c24fdb325f39d781852b8f4c2e18bfbb1072e2172445f41757f2984de895e3788c7afc1a68605c269527c84b41d0beb4871867d8de0956788b0838fabf531e80f766d1ce8591f0242eec833c6ff9e92d95594121ab809ba60a5f72f29b48786d837b674523934c76c4579ac0ac61d0280fd9125f4e729eab612f9ee633b9df3a617b232084d4f3236bc69cf2e0ffc49200c0c052a37db2a1facd87ca0f129f0f4d04eea1abde08bede0e353180be11a37112d3ab871", 0xce, <r2=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[r0, r1, r2, 0x0, 0x0, r3, 0x0], 0x7, 0x81800, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0}) (async, rerun: 64)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000540)={0x2, <r13=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, <r14=>0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x2, 0x6}) (async)
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000009c0)={0x28, 0x2, r6, 0x0, 0xcf623, 0x4, 0x5, 0x7732f}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000007c0)={0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64)
r16 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r17=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r17, <r18=>0x0}) (async)
pipe(&(0x7f0000000880)={<r19=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r19, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x58, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x6, @private0, 0xa37}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000980)=0x10) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f0000000440)={r18}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000800)={&(0x7f0000000740)=[0x0, r14, 0x0], 0x3, r15, r18, 0x4, 0x7, 0x1, 0x10001, {0xd9, 0x1, 0xbcf, 0x8, 0x1f, 0x5, 0xf8ce, 0x694f, 0x1000, 0x7fff, 0x9, 0x200, 0xffff, 0xac5, "e10951a9230ac5d05cc99db4613b8305e3a9afb0710dbfe46e284f07526b1aee"}}) (async, rerun: 64)
splice(r12, &(0x7f0000000500)=0x3ff, r13, &(0x7f0000000580)=0x6, 0x800, 0x8) (async, rerun: 32)
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000001c0)={0x18, r11}) (rerun: 32)

08:21:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='\x00', 0x10d0005, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYBLOB="bae559d51b6db4250c442d99ece62184bd34756859ebeabc6611ce51630276291fd08e", @ANYRESHEX=r0], 0x2, 0x1ef, &(0x7f0000000300)="$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") (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:55 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:55 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="5d0267b10e206a8217c922055552be81eaf886b42869f3f8e1445b13260f484ffc8469058df4c4a4af", 0x29, <r0=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="c37ec9d2cdb1c46a44e105fb9be61534154a1a6245b76f11b6032b5992f071d7cc516e211d68614485d229e762d43284", 0x30, <r1=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000300)="78741f807c0bb2c84ed51ab928b1395239389d5913fcefd42c24fdb325f39d781852b8f4c2e18bfbb1072e2172445f41757f2984de895e3788c7afc1a68605c269527c84b41d0beb4871867d8de0956788b0838fabf531e80f766d1ce8591f0242eec833c6ff9e92d95594121ab809ba60a5f72f29b48786d837b674523934c76c4579ac0ac61d0280fd9125f4e729eab612f9ee633b9df3a617b232084d4f3236bc69cf2e0ffc49200c0c052a37db2a1facd87ca0f129f0f4d04eea1abde08bede0e353180be11a37112d3ab871", 0xce, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[r0, r1, r2, 0x0, 0x0, r3, 0x0], 0x7, 0x81800, 0x0, <r4=>0xffffffffffffffff}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r11=>0x0}) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000540)={0x2, <r13=>0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, <r14=>0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x2, 0x6}) (async)
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000009c0)={0x28, 0x2, r6, 0x0, 0xcf623, 0x4, 0x5, 0x7732f}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000007c0)={0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r16 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r17=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r17, <r18=>0x0}) (async)
pipe(&(0x7f0000000880)={<r19=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r19, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x58, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x6, @private0, 0xa37}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000980)=0x10) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r16, 0xc06864ce, &(0x7f0000000440)={r18}) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000800)={&(0x7f0000000740)=[0x0, r14, 0x0], 0x3, r15, r18, 0x4, 0x7, 0x1, 0x10001, {0xd9, 0x1, 0xbcf, 0x8, 0x1f, 0x5, 0xf8ce, 0x694f, 0x1000, 0x7fff, 0x9, 0x200, 0xffff, 0xac5, "e10951a9230ac5d05cc99db4613b8305e3a9afb0710dbfe46e284f07526b1aee"}})
splice(r12, &(0x7f0000000500)=0x3ff, r13, &(0x7f0000000580)=0x6, 0x800, 0x8) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f00000001c0)={0x18, r11})

08:21:55 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000200)={0x20, r6, 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:55 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000dfd000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1568.925765][T13131] loop2: detected capacity change from 0 to 16
08:21:55 executing program 4:
r0 = open(0x0, 0x0, 0x0) (async, rerun: 64)
fstat(0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009baa57614f7500000000000000000000000000000000000000000000000000000000000000000000ff00b6df6dd36e105a81daa115f8a051cd53ef27b68f14e20a4068fcba8b28c66f7131c875fd115a15fb46bd315ce3948bdc71dce8baf6f1d40551d62e4bf22e68a2d4014435e9f419d6b854ae0c566504c4922a2de8505232a78c208cbba898973b9dece0b27805cb71"]) (async)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB, @ANYRES16=r3, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r6 = syz_open_dev$sndpcmc(&(0x7f0000000880), 0x4, 0x100) (async, rerun: 64)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x41, 0x0) (rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x22000, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r5, @ANYRESHEX]) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)="f494e5f60405883ccf39705c4ec07a5513b24fb0b059d683ce9dc48b18f1b2b442676b8f6dafd619d192799154bc22804a0f112502a54022ddd741a2873a50599afc49ff8768be57af06f560b9bae9b3d9bed840c8", 0x55}, {&(0x7f0000000200)="fe71cc7c04dbac9fef49fbf0e284f141e1572f4c3825eb2cc6e2b78974d838c0581040a5d2e5", 0x26}, {&(0x7f00000004c0)="ff7b70d74638243fb70838fa3a1a60e667524a94ed732803480a463637bee66f39a2872f522824e893af8eb873c19098295c32072f685c53b6ba8181dfca958661bbd4e0964b14ba71bbf409704d13f6a99fc3d8c793dda0f431fa3de64fd87227141499401af0e46daccdc5eea818c86dc0fb28537178f5be924deed3905a2aea1f93f41ed683755933e17d274886b2ede10b290a9ddb907ca5d56d7fffdcf603f1faa6c858053d074adf6caef9b17d84ea233f9a58606f18b354dae2c652f6eb5a74fa7c536b48db", 0xc9}, {&(0x7f0000000280)="7306e57d5a35530d35ec5d3d732d1d85aac633e7064af7a7ff8637ab6d1241aca0e6dfe45141a8c172", 0x29}, {&(0x7f00000005c0)="2ac16f9200ade4c596122fcd4f17b3b77745c60ab54eb4f0b68f9578a14a5ba553594e5a4dccfe0f73e71457515edade3e27b941751fe1afd663cf4789ae1c713503f926946cc0b6efa48557f91495b8003676554ec00756635eca6b92ee8f5fbd9ae4e49bd4c0ebe296b73045460120c92b57b7ccc6de850d8491232f2f3f8d8a634c00a546ed3f67df6cf819c1a7704b23987ca297482e52cf8782835458d33fdafa3e73e014f671cce7481e3d33b930b11bb22a21e9942f5e1df51f27e734de219ea777ed9019f0", 0xc9}, {&(0x7f00000006c0)="da2fa7505bfe07c83c66a5b0fcee11114df93521bd2c9b", 0x17}, {&(0x7f0000000700)="fa7963513a589572bc97add07cde00ffd9e537b6fb507e8255d56ff82b325e5528464fe0ae58988c4bfe42bb152bb581f7f3d6bb14d40e71f48af81acc005a0fe8b039b516fe36f9f9619bb313084301a5bde8b4afd80e785d4caabb2c95ed150f2babc7465338cb8f74a1813c1f12c033a36d78185e8fba6da6f9a6095c08588907d2d43510a4b62d4768f5941ffefcba283e2d2aa5a36e494a2a0f628f76b335172794b4e44b5318d33d191bc0c235df179b9ae79b6075145e2bcda47746371eaaea26b01ecd970f", 0xc9}], 0x7, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r5, r0, r1, r6, r1, r0, r7, r8]}}, @rights={{0x28, 0x1, 0x1, [r9, r0, r0, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r10, r0, r1]}}], 0x98, 0x20000080}}], 0x1, 0x4800) (async)
r11 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0}) (async)
r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x3, r14, 0x0, 0x11fffffffffd, 0xb2, &(0x7f0000000300)="bd9496c76611ff9a3ff86dd71f2bdcd21f3ba8011782a1daa7b3e408ae76e91ca205ed5f0bbbc2deeabadfde0d38894f56790b6195340a3b25afc2583b6c3b61b27916ab50e03f8da1eda16c4ae6f0b391b61b8351d1392a1dd2f5ac166718ad435dff2588444ebd09cdb38e9d22428737586eb4be35f6db703c78e416e8c7045dd317ffffe277da8959a80d39ef56de55605e78fff8abc9cf977141e372024661acfe0df983a3ba87d6274dffb4c4f38d87"}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r15=>0xffffffffffffffff, 0x1}) (async)
r16 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r16, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r17=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r17, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r15, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r18 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r18, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r19=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r19})

08:21:55 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:55 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000805, &(0x7f0000000400)=ANY=[], 0x2, 0x1f7, &(0x7f0000000700)="$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")
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
r8 = inotify_init1(0x0)
inotify_add_watch(r8, 0x0, 0x40)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:55 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:55 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000dfd000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:55 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x145100, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1569.085602][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1569.215420][T13155] loop2: detected capacity change from 0 to 16
08:21:56 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:56 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, r4})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1569.255825][T13157] loop4: detected capacity change from 0 to 16
[ 1569.292287][T13155] erofs: (device loop2): mounted with root inode @ nid 36.
08:21:56 executing program 4:
r0 = open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c90020007000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009baa57614f7500000000000000000000000000000000000000000000000000000000000000000000ff00b6df6dd36e105a81daa115f8a051cd53ef27b68f14e20a4068fcba8b28c66f7131c875fd115a15fb46bd315ce3948bdc71dce8baf6f1d40551d62e4bf22e68a2d4014435e9f419d6b854ae0c566504c4922a2de8505232a78c208cbba898973b9dece0b27805cb71"]) (async)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYBLOB, @ANYRES16=r3, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000880), 0x4, 0x100) (async)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x41, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x22000, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r5, @ANYRESHEX]) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)="f494e5f60405883ccf39705c4ec07a5513b24fb0b059d683ce9dc48b18f1b2b442676b8f6dafd619d192799154bc22804a0f112502a54022ddd741a2873a50599afc49ff8768be57af06f560b9bae9b3d9bed840c8", 0x55}, {&(0x7f0000000200)="fe71cc7c04dbac9fef49fbf0e284f141e1572f4c3825eb2cc6e2b78974d838c0581040a5d2e5", 0x26}, {&(0x7f00000004c0)="ff7b70d74638243fb70838fa3a1a60e667524a94ed732803480a463637bee66f39a2872f522824e893af8eb873c19098295c32072f685c53b6ba8181dfca958661bbd4e0964b14ba71bbf409704d13f6a99fc3d8c793dda0f431fa3de64fd87227141499401af0e46daccdc5eea818c86dc0fb28537178f5be924deed3905a2aea1f93f41ed683755933e17d274886b2ede10b290a9ddb907ca5d56d7fffdcf603f1faa6c858053d074adf6caef9b17d84ea233f9a58606f18b354dae2c652f6eb5a74fa7c536b48db", 0xc9}, {&(0x7f0000000280)="7306e57d5a35530d35ec5d3d732d1d85aac633e7064af7a7ff8637ab6d1241aca0e6dfe45141a8c172", 0x29}, {&(0x7f00000005c0)="2ac16f9200ade4c596122fcd4f17b3b77745c60ab54eb4f0b68f9578a14a5ba553594e5a4dccfe0f73e71457515edade3e27b941751fe1afd663cf4789ae1c713503f926946cc0b6efa48557f91495b8003676554ec00756635eca6b92ee8f5fbd9ae4e49bd4c0ebe296b73045460120c92b57b7ccc6de850d8491232f2f3f8d8a634c00a546ed3f67df6cf819c1a7704b23987ca297482e52cf8782835458d33fdafa3e73e014f671cce7481e3d33b930b11bb22a21e9942f5e1df51f27e734de219ea777ed9019f0", 0xc9}, {&(0x7f00000006c0)="da2fa7505bfe07c83c66a5b0fcee11114df93521bd2c9b", 0x17}, {&(0x7f0000000700)="fa7963513a589572bc97add07cde00ffd9e537b6fb507e8255d56ff82b325e5528464fe0ae58988c4bfe42bb152bb581f7f3d6bb14d40e71f48af81acc005a0fe8b039b516fe36f9f9619bb313084301a5bde8b4afd80e785d4caabb2c95ed150f2babc7465338cb8f74a1813c1f12c033a36d78185e8fba6da6f9a6095c08588907d2d43510a4b62d4768f5941ffefcba283e2d2aa5a36e494a2a0f628f76b335172794b4e44b5318d33d191bc0c235df179b9ae79b6075145e2bcda47746371eaaea26b01ecd970f", 0xc9}], 0x7, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r5, r0, r1, r6, r1, r0, r7, r8]}}, @rights={{0x28, 0x1, 0x1, [r9, r0, r0, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r10, r0, r1]}}], 0x98, 0x20000080}}], 0x1, 0x4800) (async)
r11 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r13=>0x0})
r14 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r11, 0x3ba0, &(0x7f0000000100)={0x38, 0x3, r14, 0x0, 0x11fffffffffd, 0xb2, &(0x7f0000000300)="bd9496c76611ff9a3ff86dd71f2bdcd21f3ba8011782a1daa7b3e408ae76e91ca205ed5f0bbbc2deeabadfde0d38894f56790b6195340a3b25afc2583b6c3b61b27916ab50e03f8da1eda16c4ae6f0b391b61b8351d1392a1dd2f5ac166718ad435dff2588444ebd09cdb38e9d22428737586eb4be35f6db703c78e416e8c7045dd317ffffe277da8959a80d39ef56de55605e78fff8abc9cf977141e372024661acfe0df983a3ba87d6274dffb4c4f38d87"}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r13, 0x0, <r15=>0xffffffffffffffff, 0x1})
r16 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r16, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r17=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r17, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r12, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r15, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r18 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r18, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r19=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r12, 0x3b86, &(0x7f00000001c0)={0x18, r19})

08:21:56 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="ac9c925e178df041bdc0c6274f1bab871092e2091f19945c5c8357ad1f5cbadda8cc921b04ac2922b01345b40292a28816feff1c371e2f9cdad44ba9d723696dd9f3688fad60b24ec568235f669bad0c5575eb488bf7da9beac03e6e1160a0ad8b6b1badabfbe365633bb7abdc4bebe55716e288d99a63e949f99ab4f49e41e986c72f02d72e5b7b2accd82c3169451d50b8b3f21db86a95c2d8a55fcd2d3171264fe8a8c17b2e1cddad8e587b18286163ebcc5cf8", 0xb5}], 0x1, 0xfffff001, 0x4d, 0xd)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})

[ 1569.396713][T13155] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:56 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r11, 0x0, &(0x7f0000e24000/0x2000)=nil, 0x2000, 0x1})
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000095c9b9baa57614f7500000000000000000000bd9a4e95b80000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc, <r12=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r12})

[ 1569.475769][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1569.536194][T13173] loop4: detected capacity change from 0 to 16
08:21:56 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0}) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x8003, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:56 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '.'}, {0x20, '/dev/iommu\x00'}, {0x20, '/dev/iommu\x00'}, {0x20, '}'}, {0x20, ':\'('}, {}], 0xa, "e65f7c831938618252420189627bea823486c7f159f6c75b435326d4714673af080d8fa8a99aa7a6433ec60317129a0322e75518ec7692a945be42b4852d017925150f6a8262fc66cf3246e144543d11fa7529d844312b158703d911d40b5174cc04f601202ce5b13d4e0347f9dcfa7f5870bf38f1b3aa9b3b38a4cedc406578be270614bf3db10a1aa522e95cdae533ddb35869fa75cd653ebef92b52578bb4d4ee665aa54000edbe3a3a8865751edcfead65a4bb58867fff9a99dd8d9eaac960090819bb69a9c8b7"}, 0xf5)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:56 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, r4}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, r4})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x4}) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000805, &(0x7f0000000400)=ANY=[], 0x2, 0x1f7, &(0x7f0000000700)="$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") (async)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000805, &(0x7f0000000400)=ANY=[], 0x2, 0x1f7, &(0x7f0000000700)="$eJzsmb+LE0EUx7+zu7d7HiLYWNhYeOCJ3v6KyjUpIoiVIERRy2A2IbpJJFkhCVgEGxtLEcHWf8DCIpWFnZ2tFioIgqYULISR2Z3sTn6aKBjl3qcYvjv73szbN5tvIAFBEPuWjx++vX94fu/KaQAHsQ1Lzn/WsxhNiX/35O6pR/kLT5+/ffaqcejeYHI9BoDz5fc3Abws6IjkNefj2dtieDyecxUaTkp9DQx2In9wnmUHYLghY24punlAijCwbzbDcqUWBq4YPDH4YsipexkAhn2GMoBNWR9T7re7vdulMAxak2KDj/aZurWqWNS/uL6ChrzSP3Fe1x/c74tr2Ru40JJeAvCgwZM6B4ai1HuwYNt21hLl+Y8a2fr6Ms+/LsG+J6+BmDm8u/56/nsxett/Fcytv1jYF/HJ+t10NjkjHjGdOTIcvJ7O+vRPnMVCwTDHcWLjUk/woox5sxWGl/5gU1PuODMm8ydmACcUfzJgpP7hRPU7Trvb263VS9WgGjR8P3fOPeO6Z32nUrPgOrEdyWRrhv9txv60pay/MccrTWaiU4qiltcBopaXXvvJqDhu8UXza5yjxf6nYed4sgaT31mYLiW9zzDquGBHn1MOQRAEQRAEQRAEQRAEQRDEihwDQ/IXCGfyB9FZ+Jfj6J8BAAD//2Caayk=")
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
r8 = inotify_init1(0x0)
inotify_add_watch(r8, 0x0, 0x40)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:56 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r11, 0x0, &(0x7f0000e24000/0x2000)=nil, 0x2000, 0x1})
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000095c9b9baa57614f7500000000000000000000bd9a4e95b80000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000095c9b9baa57614f7500000000000000000000bd9a4e95b80000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc, <r12=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r12}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r12})

08:21:56 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, r4}) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x1, 0x0, r1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async, rerun: 32)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18, r1}) (async, rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x80801, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:56 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = dup(r2)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:56 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="ac9c925e178df041bdc0c6274f1bab871092e2091f19945c5c8357ad1f5cbadda8cc921b04ac2922b01345b40292a28816feff1c371e2f9cdad44ba9d723696dd9f3688fad60b24ec568235f669bad0c5575eb488bf7da9beac03e6e1160a0ad8b6b1badabfbe365633bb7abdc4bebe55716e288d99a63e949f99ab4f49e41e986c72f02d72e5b7b2accd82c3169451d50b8b3f21db86a95c2d8a55fcd2d3171264fe8a8c17b2e1cddad8e587b18286163ebcc5cf8", 0xb5}], 0x1, 0xfffff001, 0x4d, 0xd) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})

[ 1570.033250][T13201] loop2: detected capacity change from 0 to 16
08:21:56 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '.'}, {0x20, '/dev/iommu\x00'}, {0x20, '/dev/iommu\x00'}, {0x20, '}'}, {0x20, ':\'('}, {}], 0xa, "e65f7c831938618252420189627bea823486c7f159f6c75b435326d4714673af080d8fa8a99aa7a6433ec60317129a0322e75518ec7692a945be42b4852d017925150f6a8262fc66cf3246e144543d11fa7529d844312b158703d911d40b5174cc04f601202ce5b13d4e0347f9dcfa7f5870bf38f1b3aa9b3b38a4cedc406578be270614bf3db10a1aa522e95cdae533ddb35869fa75cd653ebef92b52578bb4d4ee665aa54000edbe3a3a8865751edcfead65a4bb58867fff9a99dd8d9eaac960090819bb69a9c8b7"}, 0xf5)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '.'}, {0x20, '/dev/iommu\x00'}, {0x20, '/dev/iommu\x00'}, {0x20, '}'}, {0x20, ':\'('}, {}], 0xa, "e65f7c831938618252420189627bea823486c7f159f6c75b435326d4714673af080d8fa8a99aa7a6433ec60317129a0322e75518ec7692a945be42b4852d017925150f6a8262fc66cf3246e144543d11fa7529d844312b158703d911d40b5174cc04f601202ce5b13d4e0347f9dcfa7f5870bf38f1b3aa9b3b38a4cedc406578be270614bf3db10a1aa522e95cdae533ddb35869fa75cd653ebef92b52578bb4d4ee665aa54000edbe3a3a8865751edcfead65a4bb58867fff9a99dd8d9eaac960090819bb69a9c8b7"}, 0xf5) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (async)

08:21:57 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="ac9c925e178df041bdc0c6274f1bab871092e2091f19945c5c8357ad1f5cbadda8cc921b04ac2922b01345b40292a28816feff1c371e2f9cdad44ba9d723696dd9f3688fad60b24ec568235f669bad0c5575eb488bf7da9beac03e6e1160a0ad8b6b1badabfbe365633bb7abdc4bebe55716e288d99a63e949f99ab4f49e41e986c72f02d72e5b7b2accd82c3169451d50b8b3f21db86a95c2d8a55fcd2d3171264fe8a8c17b2e1cddad8e587b18286163ebcc5cf8", 0xb5}], 0x1, 0xfffff001, 0x4d, 0xd) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r5}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})

08:21:57 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000805, &(0x7f0000000400)=ANY=[], 0x2, 0x1f7, &(0x7f0000000700)="$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")
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0}) (async)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, 0x0, 0x40) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:57 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = dup(r2) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r8}) (async, rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0}) (rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:57 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r11, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r11, 0x0, &(0x7f0000e24000/0x2000)=nil, 0x2000, 0x1})
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000095c9b9baa57614f7500000000000000000000bd9a4e95b80000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000040)={0xc, <r12=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r12}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r12})

[ 1570.393424][T13224] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1570.415346][T13224] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1570.424601][T13227] loop2: detected capacity change from 0 to 16
[ 1570.443923][T13227] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1570.462993][T13227] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
08:21:57 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 64)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r6 = dup(r2) (rerun: 64)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 32)
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r8}) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:57 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x8ca0b247717dcfb6, r5, 0x0, &(0x7f0000bfc000/0x7000)=nil, 0x7000, 0x3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x0, 0x5, r3, 0x0, &(0x7f0000f55000/0x4000)=nil, 0x400000, 0x7fffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9})
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = signalfd4(r7, &(0x7f0000000200)={[0xef]}, 0x8, 0x0)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r13, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r13, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000})
ioctl$IOMMU_DESTROY$device(r12, 0x3b80, &(0x7f0000000040)={0x8, r14})
ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000280)={0x8, r14})
mmap$usbfs(&(0x7f0000ee3000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r11, 0x7f)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r15})

08:21:57 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x373280, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1570.625400][T13245] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1570.657939][T13245] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:57 executing program 4:
r0 = open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '.'}, {0x20, '/dev/iommu\x00'}, {0x20, '/dev/iommu\x00'}, {0x20, '}'}, {0x20, ':\'('}, {}], 0xa, "e65f7c831938618252420189627bea823486c7f159f6c75b435326d4714673af080d8fa8a99aa7a6433ec60317129a0322e75518ec7692a945be42b4852d017925150f6a8262fc66cf3246e144543d11fa7529d844312b158703d911d40b5174cc04f601202ce5b13d4e0347f9dcfa7f5870bf38f1b3aa9b3b38a4cedc406578be270614bf3db10a1aa522e95cdae533ddb35869fa75cd653ebef92b52578bb4d4ee665aa54000edbe3a3a8865751edcfead65a4bb58867fff9a99dd8d9eaac960090819bb69a9c8b7"}, 0xf5) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1}) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:57 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 32)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x8ca0b247717dcfb6, r5, 0x0, &(0x7f0000bfc000/0x7000)=nil, 0x7000, 0x3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async, rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x0, 0x5, r3, 0x0, &(0x7f0000f55000/0x4000)=nil, 0x400000, 0x7fffff}) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = signalfd4(r7, &(0x7f0000000200)={[0xef]}, 0x8, 0x0)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r13, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r13, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async, rerun: 64)
ioctl$IOMMU_DESTROY$device(r12, 0x3b80, &(0x7f0000000040)={0x8, r14}) (rerun: 64)
ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000280)={0x8, r14}) (async)
mmap$usbfs(&(0x7f0000ee3000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r11, 0x7f)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r15})

[ 1570.674092][T13249] loop2: detected capacity change from 0 to 16
[ 1570.710448][T13249] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:57 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:57 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x373280, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x373280, 0x0) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8}) (async)

08:21:57 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0x6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:57 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:57 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x8ca0b247717dcfb6, r5, 0x0, &(0x7f0000bfc000/0x7000)=nil, 0x7000, 0x3}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r6=>0xffffffffffffffff, 0x1}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x0, 0x5, r3, 0x0, &(0x7f0000f55000/0x4000)=nil, 0x400000, 0x7fffff}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = signalfd4(r7, &(0x7f0000000200)={[0xef]}, 0x8, 0x0)
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000000)={0x38, 0x2, r13, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r13, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async)
ioctl$IOMMU_DESTROY$device(r12, 0x3b80, &(0x7f0000000040)={0x8, r14}) (async)
ioctl$IOMMU_DESTROY$device(r0, 0x3b80, &(0x7f0000000280)={0x8, r14}) (async)
mmap$usbfs(&(0x7f0000ee3000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r11, 0x7f) (async)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r15=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r15, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000100)={0x18, r15})

08:21:57 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = socket$unix(0x1, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r1}, 0xb7, 0x7ff, 0x100})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})

[ 1570.933939][T13266] iommufd_mock iommufd_mock0: Adding to iommu group 0
08:21:57 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async, rerun: 64)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x2ca80c}) (async, rerun: 64)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0x6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:57 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r8}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)

[ 1570.985979][T13271] loop2: detected capacity change from 0 to 16
[ 1570.994670][T13262] iommufd_mock iommufd_mock0: Removing from iommu group 0
[ 1571.011092][T13271] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:57 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = dup2(r3, r0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})

08:21:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async, rerun: 32)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x373280, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1571.181362][T13288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1571.188345][T13288] iommufd_mock iommufd_mock0: Removing from iommu group 0
08:21:58 executing program 5:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0x6, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:58 executing program 1:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1571.342270][T13300] loop2: detected capacity change from 0 to 16
08:21:58 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = socket$unix(0x1, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r1}, 0xb7, 0x7ff, 0x100})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
socket$unix(0x1, 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r1}, 0xb7, 0x7ff, 0x100}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9}) (async)

08:21:58 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
r7 = dup2(r3, r0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})

08:21:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x44c202, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:58 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:58 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
dup2(r3, r0) (async)
r7 = dup2(r3, r0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc})

08:21:58 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18})

[ 1571.776297][T13326] loop2: detected capacity change from 0 to 16
[ 1571.820620][T13326] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:58 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})

08:21:58 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80e}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y") (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x44c202, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:58 executing program 4:
open(0x0, 0x0, 0x0) (async)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = socket$unix(0x1, 0x0, 0x0) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80101)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r1}, 0xb7, 0x7ff, 0x100}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000001c0)={0x18, r9})

08:21:58 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0xa, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r4, r1, 0x79, 0x401, 0x7f})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:59 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x383548, 0x33ad, 0x9, 0x28fe8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1572.126721][T13348] loop2: detected capacity change from 0 to 16
08:21:59 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18})

08:21:59 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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") (async)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x44c202, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:59 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r8}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r10}) (async)

08:21:59 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
write$6lowpan_control(r5, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
writev(r8, &(0x7f0000000800)=[{&(0x7f0000000300)="76a76d397879f09100d60fe9b1824fc7aacd116cf9abbe671f06c18e6a9c9b8deb3a82657ffa06c00e4e0dd9c8a0ab9b06f67f03ea0a1174f3ff85b9dadc9b2c4190b8bdd40ea0c1a7856c02d5d1d60ec1feb9cadd9fe7d4a5683bc1cf7d47e99e25ac7383d576e6f59b0a3a45393ea1f61718dd39b784ae860fa945fb7802a5efa05d6ee9f31d3f72443e597557ac164c49139af626158c02cac10d9987d7a1f7e806345bc760a33bf5b20797263425254cba2997ca3457b2d97bb653df65d56f", 0xc1}, {&(0x7f0000000400)="96f5dd0e32ac8588515c57b079a89f5ebc7b7a6dddc75eece59139e0fc17e1a602dcf06a54890d13219dc52f5a8eb98295d167071b43e703e738ea7ee2d3527445c4053ca589ae78a98d5b0f6981dd24036da67d80f623d8c4729417d9f2254e5e2aa40ca501eb3eab70815d8bc8f31fa9de16e491cf36e70688c5fa0273bf8bd8d5564ec59f357e318065c05315af9066a9e6298d35d07b81defe7cacc2eaa34b556caf0e23af1818f0e8fb088754e6784ed71e1e34c8e897db5532a576b412", 0xc0}, {&(0x7f00000004c0)="79c92cbe7860688aabb0bf6d90be5110d45470eb81872ebcfc7c3ea0c077201ad372051ac409f5fece08fcfb591a64bbee206fa1d81eef710f97f6adaa231e5de99a138838c54ef933c99d32e34def7e777420e007e373917ccb66c0072160aeb467d77ffcc68b15e5b519bda6ab1a1b4bae1d80ec9e04078f6a33d8480c1d250b80caa93f", 0x85}, {&(0x7f0000000580)="f7be9f7c22d1b8641e6724df5f25f73474019d45b7b9c277d3b2fa4feefe836a116ec5f8b1e1549c8c082b6a9858ff3e85d4814159c96cd6e93926f0bcc8c81b714178952216cd4b2783e0789be77141dc68c14e2809573ae7ff9c1e82fed0a6a84abe2ee44e09bd8cb5d0b119b4b47ed3358aecd4e07f0ee66d2c0e918843775b2924799f1c9ea078794ee59954fb94cc3b687d419f5e12b85ac173c1535e3c7efb36087e605f", 0xa7}, {&(0x7f0000000280)="aec6ea4150df9df4b4707f2e904ab08a2aa9e7125d906726b0d3e661a8cce4f8445883b1c8f3e8d3260b1cd66b2ef0bcb37a555e9089ddc6df00b72d", 0x3c}, {&(0x7f0000000640)="7e28e418849d2c0dcdbc4d186d0bbd564061251712d2292cdc255d6f134175d7e5fc80fd1e8e3f1659305f1218afc797caedad31bb7da8ad1da1fb0233332f559a11e7357f38646728506cfb8dd2bef016163f8b351e2e98148e04d72b3174f12d212ad8f5b246fd4494ecdbe61c0af1b0315822284280ab5d45e55196b0d4bade2275e2f492e77f9b6f0d8c0ef315628da00f5d8a3511099c29aa96b2f7639fb5a313141a4e3e79cee8b0527472ed65", 0xb0}, {&(0x7f0000000700)="161ababce7e2ebf9e3eb86879fee2b3cf4a051dae941e6d953d4cc0e04e2ebc6dfda294ce725489ae9cd06af69e5531341c2678f36dddbc26112e7229610b7bcb9ec3c73a3a841b7c96ee73f8361a83502841b8d061b67a078d7480a60b598eced0e836c350ac915687d28fadec5e239430783e1c1228acf818d712a0fea6e35454b18c109b38b13ad0196273cb8abf491a44cfa7313dda81d63e1e8962c190dadc1941e1980e6f61715a91e6d0e9702dd903cad98ccecd711f5503cf5bcd76053439ca9059dc0b7be934b3a", 0xcc}], 0x7)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000100)={0xc})

08:21:59 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18})

[ 1572.364550][T13365] loop2: detected capacity change from 0 to 16
08:21:59 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0xa, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r4, r1, 0x79, 0x401, 0x7f})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:59 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0xec03, 0x82a82})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

08:21:59 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x383548, 0x33ad, 0x9, 0x28fe8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) (async)
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x383548, 0x33ad, 0x9, 0x28fe8}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)

08:21:59 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x5, 0x8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000100)={0xc, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000400))
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

08:21:59 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async, rerun: 64)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async, rerun: 32)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
write$6lowpan_control(r5, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
writev(r8, &(0x7f0000000800)=[{&(0x7f0000000300)="76a76d397879f09100d60fe9b1824fc7aacd116cf9abbe671f06c18e6a9c9b8deb3a82657ffa06c00e4e0dd9c8a0ab9b06f67f03ea0a1174f3ff85b9dadc9b2c4190b8bdd40ea0c1a7856c02d5d1d60ec1feb9cadd9fe7d4a5683bc1cf7d47e99e25ac7383d576e6f59b0a3a45393ea1f61718dd39b784ae860fa945fb7802a5efa05d6ee9f31d3f72443e597557ac164c49139af626158c02cac10d9987d7a1f7e806345bc760a33bf5b20797263425254cba2997ca3457b2d97bb653df65d56f", 0xc1}, {&(0x7f0000000400)="96f5dd0e32ac8588515c57b079a89f5ebc7b7a6dddc75eece59139e0fc17e1a602dcf06a54890d13219dc52f5a8eb98295d167071b43e703e738ea7ee2d3527445c4053ca589ae78a98d5b0f6981dd24036da67d80f623d8c4729417d9f2254e5e2aa40ca501eb3eab70815d8bc8f31fa9de16e491cf36e70688c5fa0273bf8bd8d5564ec59f357e318065c05315af9066a9e6298d35d07b81defe7cacc2eaa34b556caf0e23af1818f0e8fb088754e6784ed71e1e34c8e897db5532a576b412", 0xc0}, {&(0x7f00000004c0)="79c92cbe7860688aabb0bf6d90be5110d45470eb81872ebcfc7c3ea0c077201ad372051ac409f5fece08fcfb591a64bbee206fa1d81eef710f97f6adaa231e5de99a138838c54ef933c99d32e34def7e777420e007e373917ccb66c0072160aeb467d77ffcc68b15e5b519bda6ab1a1b4bae1d80ec9e04078f6a33d8480c1d250b80caa93f", 0x85}, {&(0x7f0000000580)="f7be9f7c22d1b8641e6724df5f25f73474019d45b7b9c277d3b2fa4feefe836a116ec5f8b1e1549c8c082b6a9858ff3e85d4814159c96cd6e93926f0bcc8c81b714178952216cd4b2783e0789be77141dc68c14e2809573ae7ff9c1e82fed0a6a84abe2ee44e09bd8cb5d0b119b4b47ed3358aecd4e07f0ee66d2c0e918843775b2924799f1c9ea078794ee59954fb94cc3b687d419f5e12b85ac173c1535e3c7efb36087e605f", 0xa7}, {&(0x7f0000000280)="aec6ea4150df9df4b4707f2e904ab08a2aa9e7125d906726b0d3e661a8cce4f8445883b1c8f3e8d3260b1cd66b2ef0bcb37a555e9089ddc6df00b72d", 0x3c}, {&(0x7f0000000640)="7e28e418849d2c0dcdbc4d186d0bbd564061251712d2292cdc255d6f134175d7e5fc80fd1e8e3f1659305f1218afc797caedad31bb7da8ad1da1fb0233332f559a11e7357f38646728506cfb8dd2bef016163f8b351e2e98148e04d72b3174f12d212ad8f5b246fd4494ecdbe61c0af1b0315822284280ab5d45e55196b0d4bade2275e2f492e77f9b6f0d8c0ef315628da00f5d8a3511099c29aa96b2f7639fb5a313141a4e3e79cee8b0527472ed65", 0xb0}, {&(0x7f0000000700)="161ababce7e2ebf9e3eb86879fee2b3cf4a051dae941e6d953d4cc0e04e2ebc6dfda294ce725489ae9cd06af69e5531341c2678f36dddbc26112e7229610b7bcb9ec3c73a3a841b7c96ee73f8361a83502841b8d061b67a078d7480a60b598eced0e836c350ac915687d28fadec5e239430783e1c1228acf818d712a0fea6e35454b18c109b38b13ad0196273cb8abf491a44cfa7313dda81d63e1e8962c190dadc1941e1980e6f61715a91e6d0e9702dd903cad98ccecd711f5503cf5bcd76053439ca9059dc0b7be934b3a", 0xcc}], 0x7) (async, rerun: 64)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7}) (rerun: 64)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000100)={0xc})

08:21:59 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

[ 1572.899540][T13399] loop2: detected capacity change from 0 to 16
08:21:59 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0xec03, 0x82a82})
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r4})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1572.945031][T13399] erofs: Unknown parameter '����01777777777777777777777^̱M��/Q�����gJ�7�[�_�2�3��X��LQ�@�zopۋ�5)�7��#��q'
08:21:59 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0xa, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0xa, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r4, r1, 0x79, 0x401, 0x7f})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:21:59 executing program 3:
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x4, r7, r8, 0x383548, 0x33ad, 0x9, 0x28fe8})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:22:00 executing program 4:
open(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x404000, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
write$6lowpan_control(r5, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
writev(r8, &(0x7f0000000800)=[{&(0x7f0000000300)="76a76d397879f09100d60fe9b1824fc7aacd116cf9abbe671f06c18e6a9c9b8deb3a82657ffa06c00e4e0dd9c8a0ab9b06f67f03ea0a1174f3ff85b9dadc9b2c4190b8bdd40ea0c1a7856c02d5d1d60ec1feb9cadd9fe7d4a5683bc1cf7d47e99e25ac7383d576e6f59b0a3a45393ea1f61718dd39b784ae860fa945fb7802a5efa05d6ee9f31d3f72443e597557ac164c49139af626158c02cac10d9987d7a1f7e806345bc760a33bf5b20797263425254cba2997ca3457b2d97bb653df65d56f", 0xc1}, {&(0x7f0000000400)="96f5dd0e32ac8588515c57b079a89f5ebc7b7a6dddc75eece59139e0fc17e1a602dcf06a54890d13219dc52f5a8eb98295d167071b43e703e738ea7ee2d3527445c4053ca589ae78a98d5b0f6981dd24036da67d80f623d8c4729417d9f2254e5e2aa40ca501eb3eab70815d8bc8f31fa9de16e491cf36e70688c5fa0273bf8bd8d5564ec59f357e318065c05315af9066a9e6298d35d07b81defe7cacc2eaa34b556caf0e23af1818f0e8fb088754e6784ed71e1e34c8e897db5532a576b412", 0xc0}, {&(0x7f00000004c0)="79c92cbe7860688aabb0bf6d90be5110d45470eb81872ebcfc7c3ea0c077201ad372051ac409f5fece08fcfb591a64bbee206fa1d81eef710f97f6adaa231e5de99a138838c54ef933c99d32e34def7e777420e007e373917ccb66c0072160aeb467d77ffcc68b15e5b519bda6ab1a1b4bae1d80ec9e04078f6a33d8480c1d250b80caa93f", 0x85}, {&(0x7f0000000580)="f7be9f7c22d1b8641e6724df5f25f73474019d45b7b9c277d3b2fa4feefe836a116ec5f8b1e1549c8c082b6a9858ff3e85d4814159c96cd6e93926f0bcc8c81b714178952216cd4b2783e0789be77141dc68c14e2809573ae7ff9c1e82fed0a6a84abe2ee44e09bd8cb5d0b119b4b47ed3358aecd4e07f0ee66d2c0e918843775b2924799f1c9ea078794ee59954fb94cc3b687d419f5e12b85ac173c1535e3c7efb36087e605f", 0xa7}, {&(0x7f0000000280)="aec6ea4150df9df4b4707f2e904ab08a2aa9e7125d906726b0d3e661a8cce4f8445883b1c8f3e8d3260b1cd66b2ef0bcb37a555e9089ddc6df00b72d", 0x3c}, {&(0x7f0000000640)="7e28e418849d2c0dcdbc4d186d0bbd564061251712d2292cdc255d6f134175d7e5fc80fd1e8e3f1659305f1218afc797caedad31bb7da8ad1da1fb0233332f559a11e7357f38646728506cfb8dd2bef016163f8b351e2e98148e04d72b3174f12d212ad8f5b246fd4494ecdbe61c0af1b0315822284280ab5d45e55196b0d4bade2275e2f492e77f9b6f0d8c0ef315628da00f5d8a3511099c29aa96b2f7639fb5a313141a4e3e79cee8b0527472ed65", 0xb0}, {&(0x7f0000000700)="161ababce7e2ebf9e3eb86879fee2b3cf4a051dae941e6d953d4cc0e04e2ebc6dfda294ce725489ae9cd06af69e5531341c2678f36dddbc26112e7229610b7bcb9ec3c73a3a841b7c96ee73f8361a83502841b8d061b67a078d7480a60b598eced0e836c350ac915687d28fadec5e239430783e1c1228acf818d712a0fea6e35454b18c109b38b13ad0196273cb8abf491a44cfa7313dda81d63e1e8962c190dadc1941e1980e6f61715a91e6d0e9702dd903cad98ccecd711f5503cf5bcd76053439ca9059dc0b7be934b3a", 0xcc}], 0x7) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000100)={0xc})

08:22:00 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r2, 0x0, 0x10000, 0x0, 0x5, 0xec03, 0x82a82}) (async)
ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r4}) (async)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r7})

[ 1573.293098][T13416] ==================================================================
[ 1573.301308][T13416] BUG: KASAN: slab-use-after-free in iommufd_access_unpin_pages+0x363/0x370
[ 1573.310027][T13416] Read of size 8 at addr ffff888018393020 by task syz-executor.1/13416
[ 1573.318295][T13416] 
[ 1573.320639][T13416] CPU: 1 PID: 13416 Comm: syz-executor.1 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0
[ 1573.330731][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 1573.340991][T13416] Call Trace:
[ 1573.344305][T13416]  <TASK>
[ 1573.347254][T13416]  dump_stack_lvl+0xd9/0x150
[ 1573.351889][T13416]  print_address_description.constprop.0+0x2c/0x3c0
[ 1573.358609][T13416]  ? iommufd_access_unpin_pages+0x363/0x370
[ 1573.364532][T13416]  kasan_report+0x11c/0x130
[ 1573.369051][T13416]  ? iommufd_access_unpin_pages+0x363/0x370
[ 1573.374974][T13416]  iommufd_access_unpin_pages+0x363/0x370
[ 1573.380718][T13416]  ? iommufd_access_rw+0x490/0x490
[ 1573.385860][T13416]  ? iommufd_access_notify_unmap+0x1e7/0x3a0
[ 1573.391875][T13416]  iommufd_test_access_unmap+0x24b/0x390
[ 1573.397541][T13416]  ? mock_domain_alloc+0x1e0/0x1e0
[ 1573.402701][T13416]  iommufd_access_notify_unmap+0x24c/0x3a0
[ 1573.408552][T13416]  ? iommufd_access_destroy_object+0x150/0x150
[ 1573.414742][T13416]  iopt_unmap_iova_range+0x4c4/0x5f0
[ 1573.420061][T13416]  iopt_unmap_all+0x27/0x50
[ 1573.424609][T13416]  iommufd_ioas_unmap+0x3d0/0x490
[ 1573.429653][T13416]  ? iommufd_ioas_copy+0x7e0/0x7e0
[ 1573.434781][T13416]  iommufd_fops_ioctl+0x317/0x4b0
[ 1573.439821][T13416]  ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 1573.445638][T13416]  ? selinux_file_ioctl+0xba/0x280
[ 1573.450756][T13416]  ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 1573.456573][T13416]  __x64_sys_ioctl+0x19d/0x210
[ 1573.461365][T13416]  do_syscall_64+0x39/0xb0
[ 1573.465792][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1573.471692][T13416] RIP: 0033:0x7f4ecdc8c389
[ 1573.476109][T13416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1573.495725][T13416] RSP: 002b:00007f4ecc7dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1573.504144][T13416] RAX: ffffffffffffffda RBX: 00007f4ecddac050 RCX: 00007f4ecdc8c389
[ 1573.512293][T13416] RDX: 00000000200001c0 RSI: 0000000000003b86 RDI: 0000000000000003
[ 1573.520265][T13416] RBP: 00007f4ecdcd7493 R08: 0000000000000000 R09: 0000000000000000
[ 1573.528236][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1573.536206][T13416] R13: 00007ffccdcb918f R14: 00007f4ecc7dd300 R15: 0000000000022000
[ 1573.544178][T13416]  </TASK>
[ 1573.547196][T13416] 
[ 1573.549511][T13416] Allocated by task 13415:
[ 1573.553915][T13416]  kasan_save_stack+0x22/0x40
[ 1573.558614][T13416]  kasan_set_track+0x25/0x30
[ 1573.563227][T13416]  __kasan_kmalloc+0xa3/0xb0
[ 1573.567826][T13416]  iopt_alloc_area_pages+0x94/0x560
[ 1573.573128][T13416]  iopt_map_user_pages+0x205/0x4e0
[ 1573.578267][T13416]  iommufd_ioas_map+0x329/0x5f0
[ 1573.583145][T13416]  iommufd_fops_ioctl+0x317/0x4b0
[ 1573.588211][T13416]  __x64_sys_ioctl+0x19d/0x210
[ 1573.592993][T13416]  do_syscall_64+0x39/0xb0
[ 1573.597423][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1573.603339][T13416] 
[ 1573.605656][T13416] Freed by task 13415:
[ 1573.609716][T13416]  kasan_save_stack+0x22/0x40
[ 1573.614393][T13416]  kasan_set_track+0x25/0x30
[ 1573.618987][T13416]  kasan_save_free_info+0x2b/0x40
[ 1573.624031][T13416]  ____kasan_slab_free+0x13b/0x1a0
[ 1573.629145][T13416]  __kmem_cache_free+0xcd/0x2c0
[ 1573.634087][T13416]  iopt_unmap_iova_range+0x288/0x5f0
[ 1573.639379][T13416]  iopt_unmap_all+0x27/0x50
[ 1573.643894][T13416]  iommufd_ioas_unmap+0x3d0/0x490
[ 1573.649009][T13416]  iommufd_fops_ioctl+0x317/0x4b0
[ 1573.654043][T13416]  __x64_sys_ioctl+0x19d/0x210
[ 1573.658807][T13416]  do_syscall_64+0x39/0xb0
[ 1573.663228][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1573.669127][T13416] 
[ 1573.671443][T13416] The buggy address belongs to the object at ffff888018393000
[ 1573.671443][T13416]  which belongs to the cache kmalloc-cg-192 of size 192
[ 1573.685749][T13416] The buggy address is located 32 bytes inside of
[ 1573.685749][T13416]  freed 192-byte region [ffff888018393000, ffff8880183930c0)
[ 1573.699454][T13416] 
[ 1573.701771][T13416] The buggy address belongs to the physical page:
[ 1573.708197][T13416] page:ffffea000060e4c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18393
[ 1573.718361][T13416] memcg:ffff88802e264c01
[ 1573.722597][T13416] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1573.730162][T13416] page_type: 0x10()
[ 1573.734007][T13416] raw: 00fff00000000200 ffff88801244d500 ffffea0000aa9410 ffffea0001dd8e90
[ 1573.742624][T13416] raw: 0000000000000000 ffff888018393000 0000000100000010 ffff88802e264c01
[ 1573.751207][T13416] page dumped because: kasan: bad access detected
[ 1573.757621][T13416] page_owner tracks the page as allocated
[ 1573.763323][T13416] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 6505, tgid 6504 (syz-executor.3), ts 1431087752219, free_ts 1431045519173
[ 1573.785313][T13416]  post_alloc_hook+0x2db/0x350
[ 1573.790090][T13416]  get_page_from_freelist+0xf41/0x2c00
[ 1573.795572][T13416]  __alloc_pages+0x1cb/0x4a0
[ 1573.800187][T13416]  cache_grow_begin+0x9b/0x3b0
[ 1573.804969][T13416]  cache_alloc_refill+0x27f/0x380
[ 1573.810020][T13416]  __kmem_cache_alloc_node+0x360/0x3f0
[ 1573.815491][T13416]  kmalloc_trace+0x26/0xe0
[ 1573.819930][T13416]  iopt_alloc_area_pages+0x94/0x560
[ 1573.825150][T13416]  iopt_map_user_pages+0x205/0x4e0
[ 1573.830276][T13416]  iommufd_ioas_map+0x329/0x5f0
[ 1573.835144][T13416]  iommufd_fops_ioctl+0x317/0x4b0
[ 1573.840173][T13416]  __x64_sys_ioctl+0x19d/0x210
[ 1573.844938][T13416]  do_syscall_64+0x39/0xb0
[ 1573.849362][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1573.855375][T13416] page last free stack trace:
[ 1573.860036][T13416]  free_unref_page_prepare+0x62e/0xcb0
[ 1573.865496][T13416]  free_unref_page_list+0xe3/0xa70
[ 1573.870621][T13416]  release_pages+0xcd8/0x1380
[ 1573.875303][T13416]  tlb_batch_pages_flush+0xa8/0x1a0
[ 1573.880503][T13416]  tlb_finish_mmu+0x14b/0x7e0
[ 1573.885193][T13416]  exit_mmap+0x2b2/0x930
[ 1573.889436][T13416]  __mmput+0x128/0x4d0
[ 1573.893508][T13416]  mmput+0x60/0x70
[ 1573.897234][T13416]  do_exit+0x9b0/0x29b0
[ 1573.901431][T13416]  do_group_exit+0xd4/0x2a0
[ 1573.906043][T13416]  get_signal+0x2318/0x25b0
[ 1573.910563][T13416]  arch_do_signal_or_restart+0x79/0x5c0
[ 1573.916174][T13416]  exit_to_user_mode_prepare+0x11f/0x240
[ 1573.921830][T13416]  syscall_exit_to_user_mode+0x1d/0x50
[ 1573.927331][T13416]  do_syscall_64+0x46/0xb0
[ 1573.931771][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1573.937671][T13416] 
[ 1573.939986][T13416] Memory state around the buggy address:
[ 1573.945608][T13416]  ffff888018392f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1573.953692][T13416]  ffff888018392f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1573.961777][T13416] >ffff888018393000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1573.969846][T13416]                                ^
[ 1573.974965][T13416]  ffff888018393080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1573.983046][T13416]  ffff888018393100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1573.991126][T13416] ==================================================================
[ 1573.999264][    C1] vkms_vblank_simulate: vblank timer overrun
08:22:00 executing program 5:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c}) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r6})

08:22:00 executing program 2:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000805, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="5eccb11e4da4fd2f519bafc10ce7d3674af837a15bb85f8f321816d233dbd1580590e9814c519c40ba7a6f70db8b088f3529b237a19f23d7d3712cc0e3a08ea85fd8d10e06a904e70901d2c8d45d2afc7cabb7d86c9064d97b1968ab175b5c351e271372725fbe9b3d61c31394f8582b642b710e23fd13e839a5a1eb61f0eb62f525", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x2, 0x1ef, &(0x7f0000000500)="$eJzsmb+LE0EUx78zu7d7HiLYWNhYeOCJ3v6KyjVXnCBWgnCKWgZv74juXSS3wl3AItjYWIoItv4DFhapLOzsbLVQQbAwpWAhjMzsuDvZZEPCFQnkfeDmvjP7Zt7bl+S7kIAgiLnl+7ffX59fXbt1EcBxLMPV6z+tIoYb8V9ePb7wYv3a67ef33zYO/GkWz6PARBi/PwOgPcbFlI9F6J/97IcXvbvuQ2O81rfAYOXyb9CFLtjMNzTMQ8M3TymRRJ795vJ1nYjiQM5hHKI5FAzc9kAeh2GLQCLuj5mXN8/bD+sJ0ncKosF8T/PwKVJxaj+qfo2ONaN/snX6+6zpx05171BAJ71EkAIjlDrGhg2tV6DC8/zipYY93/aLs63xrn/aQn2J3sbyJWTq9OvZ26EcGeijDEEK6/ID3S+cqrX/Ti468esFF8tGCocRxkXgHzluo75tJQkN46Q1NEZh8YU/sRs4JzhTzbs3D/8dPeRv3/YXm3s1nfinXgvimpXgktBcDnytxsuAl/Z0Qj/W1T+tGScv1AR6zAHB/U0bYUHQNoK83mUjYbjbr5r/lJ7uPI/jpWz2RlMP7PyB2UJpv+4+i/VilVZPEEQBEEQBEEQBEEQBEEQxEScAUP2E4hg+gvRYUQ3VfS/AAAA///qUm5y")
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x5, 0x8}) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000200)={0x38, 0x1, r1, 0x0, 0x5, 0x8})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"]) (async)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c9002000700000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095c9b9baa57614f750000000000000000000000000000000000000000000000000000000000000000000000ff"])
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000100)={0xc, r1})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000400))
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000bfd000/0x400000)=nil, 0x400000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2ca80c})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000001c0)={0x18, r8})

[ 1574.039443][T13416] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1574.046775][T13416] CPU: 0 PID: 13416 Comm: syz-executor.1 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0
[ 1574.056867][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 1574.067380][T13416] Call Trace:
[ 1574.070677][T13416]  <TASK>
[ 1574.073631][T13416]  dump_stack_lvl+0xd9/0x150
[ 1574.078269][T13416]  panic+0x686/0x730
[ 1574.082219][T13416]  ? panic_smp_self_stop+0xa0/0xa0
[ 1574.087470][T13416]  ? preempt_schedule_thunk+0x1a/0x20
[ 1574.092924][T13416]  ? preempt_schedule_common+0x45/0xb0
[ 1574.098437][T13416]  check_panic_on_warn+0xb1/0xc0
[ 1574.103417][T13416]  end_report+0xe9/0x120
[ 1574.107694][T13416]  ? iommufd_access_unpin_pages+0x363/0x370
[ 1574.113621][T13416]  kasan_report+0xf9/0x130
[ 1574.118071][T13416]  ? iommufd_access_unpin_pages+0x363/0x370
[ 1574.124008][T13416]  iommufd_access_unpin_pages+0x363/0x370
[ 1574.129756][T13416]  ? iommufd_access_rw+0x490/0x490
[ 1574.134893][T13416]  ? iommufd_access_notify_unmap+0x1e7/0x3a0
[ 1574.141003][T13416]  iommufd_test_access_unmap+0x24b/0x390
[ 1574.146683][T13416]  ? mock_domain_alloc+0x1e0/0x1e0
[ 1574.151838][T13416]  iommufd_access_notify_unmap+0x24c/0x3a0
[ 1574.157689][T13416]  ? iommufd_access_destroy_object+0x150/0x150
[ 1574.163884][T13416]  iopt_unmap_iova_range+0x4c4/0x5f0
[ 1574.169232][T13416]  iopt_unmap_all+0x27/0x50
[ 1574.173776][T13416]  iommufd_ioas_unmap+0x3d0/0x490
[ 1574.178842][T13416]  ? iommufd_ioas_copy+0x7e0/0x7e0
[ 1574.184006][T13416]  iommufd_fops_ioctl+0x317/0x4b0
[ 1574.189057][T13416]  ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 1574.194879][T13416]  ? selinux_file_ioctl+0xba/0x280
[ 1574.200000][T13416]  ? iommufd_get_object.part.0+0x2b0/0x2b0
[ 1574.205813][T13416]  __x64_sys_ioctl+0x19d/0x210
[ 1574.210666][T13416]  do_syscall_64+0x39/0xb0
[ 1574.215092][T13416]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1574.220998][T13416] RIP: 0033:0x7f4ecdc8c389
[ 1574.225418][T13416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1574.245330][T13416] RSP: 002b:00007f4ecc7dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1574.253744][T13416] RAX: ffffffffffffffda RBX: 00007f4ecddac050 RCX: 00007f4ecdc8c389
[ 1574.261727][T13416] RDX: 00000000200001c0 RSI: 0000000000003b86 RDI: 0000000000000003
[ 1574.269697][T13416] RBP: 00007f4ecdcd7493 R08: 0000000000000000 R09: 0000000000000000
[ 1574.277689][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1574.285764][T13416] R13: 00007ffccdcb918f R14: 00007f4ecc7dd300 R15: 0000000000022000
[ 1574.293786][T13416]  </TASK>
[ 1574.297066][T13416] Kernel Offset: disabled
[ 1574.301483][T13416] Rebooting in 86400 seconds..