last executing test programs: 16m2.13162205s ago: executing program 3 (id=2107): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009b, 0x0, 0x31c4}]}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r5], 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r5], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, r5}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r6, &(0x7f00000001c0)="d1", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) close(r6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x4a, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x4a, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r4, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) (async) r8 = dup(r7) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200843, 0x0) (async) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200843, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x11) r10 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0xc8b00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r10, 0xc1485544, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16m1.446756085s ago: executing program 3 (id=2112): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0xc013, 0x8, 0x1000, 0x0, 0x7}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 16m1.243679199s ago: executing program 3 (id=2115): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e0000000028260c146a33fe8689ecf10e"]) r3 = syz_open_dev$evdev(0xfffffffffffffffe, 0x3, 0x101000) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r1, 0x40101286, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000340)={0xdddd0000, 0xffff1000, 0x0, 0x1, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x6840) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x6840) read$FUSE(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) r10 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write(r10, 0x0, 0x0) (async) write(r10, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) mmap(&(0x7f00000db000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r8, 0x8a115000) (async) mmap(&(0x7f00000db000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r8, 0x8a115000) read(r11, 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000740)=""/199) (async) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000740)=""/199) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000002c0)={'syz0\x00', {0x7ff, 0x6, 0x4, 0x9}, 0x48, [0xf03b, 0x4, 0x6b54ba5b, 0x8, 0x7ff, 0x19, 0x401, 0x6, 0x8, 0x5, 0x7, 0x7, 0x3, 0x8, 0x0, 0x436, 0x400, 0x1, 0x6, 0x9, 0x9, 0x730, 0xfffff000, 0x61, 0x4, 0x80000000, 0x1, 0x1, 0x9, 0x1, 0x1c0, 0xfff, 0x8, 0x864c, 0x2, 0x5, 0x400, 0x17cbc6a7, 0xfc3, 0x7, 0x1, 0x6, 0x400, 0x80, 0x81, 0xf3, 0x8d, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x100, 0x7f, 0x200, 0x0, 0x6, 0xfffffb81, 0x2, 0xaeb80000, 0x507440df, 0x8, 0x147, 0x1], [0x401, 0x800, 0x5, 0x3ff, 0x2, 0x0, 0x1ff, 0x8, 0x7, 0x80000001, 0x4, 0x200, 0x7ffc, 0x9, 0xfffffffe, 0x0, 0x3, 0x8, 0x1, 0x40, 0x1, 0x5, 0x9, 0x8, 0x4, 0x80000000, 0x1ff, 0x60, 0x1, 0x5, 0x9, 0x10000, 0x1, 0xc, 0x8000, 0x92, 0x10000, 0x101, 0x0, 0x7ff, 0x2cf, 0x8d9, 0x9, 0x3, 0x2, 0x8, 0x1, 0x37, 0xffffffff, 0x6, 0x8cbb2a9, 0xfffffff5, 0x1, 0x40000004, 0x9, 0x2, 0xfffffff7, 0xfff, 0x3, 0x4, 0x7, 0x10, 0x6, 0x7f], [0xff, 0xcd98, 0x2, 0xb2, 0x6, 0x12, 0x45a, 0x6, 0x9, 0xffffffff, 0x50b, 0x8001, 0x9257, 0x80000000, 0x7fff, 0x2, 0xffff0001, 0x1000, 0x5, 0x2, 0x7, 0x1, 0x6, 0x2, 0x8, 0x9, 0x4, 0x7, 0xff, 0x2, 0x284, 0x8, 0x7, 0x1, 0x9, 0x7f, 0xf17, 0x8, 0x6, 0x8000, 0x9, 0x30000, 0x8, 0x8, 0x6, 0x1, 0xdde9, 0x6, 0x401, 0x7fff, 0x0, 0x7, 0x4, 0x0, 0x3, 0x1, 0xc8, 0x0, 0x1, 0x80, 0x8, 0x2, 0x24d4, 0x2], [0xffff4d44, 0x0, 0x8, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x1, 0x1, 0x7, 0x4, 0x6, 0xff, 0x5, 0x40, 0xc0, 0x4, 0x1, 0x0, 0x6, 0x3, 0xfffffffc, 0xb3, 0xfffffff7, 0x101, 0x3, 0x1, 0x4000081, 0x1, 0x400, 0x4, 0xbeb, 0xf3e, 0x4, 0xa, 0x8, 0x400, 0x87e9, 0x6, 0x9a2b, 0x2, 0x6000, 0xddc4, 0x0, 0x40, 0x1, 0x3, 0x4, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x4, 0x9, 0x9, 0x0, 0x6, 0x8, 0x7ff, 0x8d, 0x7, 0x10]}, 0x45c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x4) 16m0.743854195s ago: executing program 3 (id=2118): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x38000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r3, &(0x7f0000000100)=""/66, 0x42) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) read(r3, &(0x7f00000019c0)=""/4107, 0x100b) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$loop(&(0x7f00000007c0), 0x0, 0xa280) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000840)={r6, 0x49, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x1, 0x1e, 0x0, "87796604080cf776445f30a0ea6496395672f7fb61b0e4e889106194067eb0de2c897623e66505b5d4ec293e64528b44e4a37b22969dc52f369c285392815fcd", "2510a4ac70d94e19946ee8c7845bc1ada2409a751949273a03ab4c9479f6893f662705155db5bbd604503d8dce2cf95a450b0e2fafec7921e1df1058d9bbdcc8", "527c1a7b81d981ac12166127d2d123462edc951352203a2f4aaa63ff9fbc57d5"}}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f00005b6000/0x2000)=nil, 0x1002, 0xa, 0x8012, r7, 0x83000000) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 15m59.691801157s ago: executing program 3 (id=2129): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) lseek(r0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551c, 0xffffffffffffffff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2280, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000240)=0xca}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x52, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 15m59.431984235s ago: executing program 3 (id=2132): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0xe}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) 15m44.36658224s ago: executing program 32 (id=2132): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0xe}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) 13m53.906610186s ago: executing program 1 (id=2972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100649d843e0b3da5c2004000000000c431000000000000"]) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000980)) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x4000}) (async, rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0xeeef0000}) (async, rerun: 64) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r7, 0x851, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f00000000c0)={0xa14, 0xc0011036, &(0x7f00000003c0)="3c04aa4c4b574b075b0bcfc8e4e311599d6b133d556c748243218ea3883b4cd7e6fe6fb91ab380b41a9a905399df8f090454ea67a1575bb772d659288c25074e9e8d64b0e381b56156ed830faa095935ab3614a3932bbde03aed6d4fa58b2d789ab4b447b84cdaf2c9f92aa8432f51d17cfd5c77d774d25169b145d732fd041fa8c97994baa45a2d3b1a5301b92557348f8529b751a7f0e2f18288fbfd6a043157f7518946bdcb", &(0x7f0000000480)="27dd050feda259c2f27a00ad9f48c90c7304cbf18cb8694e914ac18b55fd9f0fc58947bb0fbf4f4b226b9543dd92a2d04d970374236aa87f766fb477297268662156dff543489c", 0xa7, 0x47}) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async, rerun: 32) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x4000, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{}, {0xff, 0x0, 0x10, '\x00', 0xfc}, {}, {}, {0x0, 0xdc, 0x0, '\x00', 0x1}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x4, 0x8b, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x40}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9}, {}, {0x1, 0x1}, {}, {0x20}, {0x3}, {0x4, 0x4}]}}) (async, rerun: 32) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f0000000080)={0x7, 0xc}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) (async, rerun: 32) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (rerun: 32) 13m53.658899998s ago: executing program 1 (id=2975): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0xb2560000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1b) r3 = dup(r2) write$FUSE_INIT(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) write$sndseq(r1, &(0x7f0000000000)=[{0x32, 0x3, 0x8a, 0x40, @tick=0x9, {0x4}, {0x0, 0x8}, @note={0x0, 0xed, 0x1, 0xb, 0x8}}], 0x1c) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000100)={0x6, 0xd}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x810, r4, 0x7dfff000) 13m53.588425599s ago: executing program 1 (id=2976): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x4, 0x9, 0x3a22bc02, 0x0, 0xe78, 0x7, 0x0, 0x7fff, 0x53, 0x6, 0x35, 0x5, 0x9, 0x10001, 0xdf3], 0x5000, 0x8000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x240580) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x2, 0x3, 0x6, 0x1, 0x5}, 0xb8, 0x30000, 0x8}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000001c0)={0xd86, 0x28, [0x1, 0x2, 0x6, 0xa5cd], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) tee(r1, r2, 0x7, 0x4) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000240)) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000280)={{r0}, "66c3d5eb8f8bd0803a686afe3da7097121a89dc9795eda8d88eb9bd6f1566e50c5248973379c59bcac74ca0b07699fc47d4fe1d1a620e5f9c7f781ca7875ddd68435e510d0492cb73c288b0d4ccb9437462c641050ee04ff8ec5a8ef8fa87a722f62f5c85b28a250a58b0b1c75d8755e4d282666dd9c19d0af738a3f5b147afef2532c1d53a4244e6da3053b61459d83782857a1df5a2e75811a85675e8ba9aea1395bb162dfdc8832abf191589eb79eec5378eeb03a98ec2066cd1fa1b5c439848b0c5591dcf8a98eee2148ac451cb07158c66481a57787e3fb8337a5b8fc2c32ca4e906018ef339e8ea2127329e2c7e87d02c38b96126a1298c29fdb557dfed6ff5592b4ac4fc90994eac11b474c2648350e402b5869fd12867e5bd19ae6ad26ec9b44b045e0540d1928279f6fdf88f4166a68be8ffc58affc6d2635eb6ea362234f8778c1edc63c126cb4baa45f107fbdf3b84ac04fc808d95c945058c251a7559a8544e20c8b8c00ee0c3ac596b39e53359ec5f9b04bec329a38d3eae69ade379710b377e011eb9e1a1f5e2b04b5036e396cddc8c904ab962a6fa571e43b66d6b9949555532a86f492ddadae443492cbd39ebf2919a670a84d38d8309f88c7f719773c57abf08deb317df1b1fc51406845d8a0d745a77433727a176439e9b2f6e712e475a97764de20ecae3dc83a8469af5a0ad4faebd46c25f2b02a1a18976a3491fd188b6f1ec6e971ab7b0af315d0fffbbe63850d7b7bbcfd6db6e2fc3b5587f8bbac183d5489db970f83057991c79e143e1db1f89486a4063a676584d1f536ff904ea5feb58740c389e7ccb018b1b62f6cbc5d67f1f9116bcbc0f4c6d355a883431b41893173d7993c5acae4fa451e13e41e70947728d6e062a9155bd728c76d3b1fb65dc0b63da1a173ae63eabf093d319871a7096c6992943b0188eae87e0ab60a80062c36a4773a39a92b67cae60a839954e2ef2ee321862721739788942fc6617abe327cc5c2114d8fecb1ee5ef71356275a64172a8d916bafeea46c85987cc426b24a7a6fd3c0b5e7b2120a97c66d12eb2b92e9467f7858ec6a74e01a123ae75d2d96c6fe7d9067c9066b0f58e5cb9605abd6ebe68b2670b48f7f222590d7b60d13fb9cc468428966535501ba089e3333fb38d7c081500baf3743e058fe2d2d514f86369817301d2f4e01d3b9c295a3b9b89778271b1906e6a3af6e436adbbc8667fcdcba2cb318e73cfbe295d3dbad19530fafcea9332307f0d1968acf59c4737daea04f764f42310a72429186fd377865592ddd728c0f171187394682fe1e5fadb975212336f44c8146dea0c9cb05d389df88cbf4d0fd8b508001502aed8f25e1e2de3b1ee71ddbc0c6cd26592977ad66f0ccb499adf7e86d2448ff116ff36712f97e3688b89520b35cded9636146c9d14975e91545a4f04d88cb9f2c1cc13d711f24c7f32ebc8d7e36487ed93c538dcdd6e3fed6ad2ff090fe8587953c768692960868d73c22c1f5f8c5fac6681c5d81466e17dbcd7b73194a3c149f7e47ab98da59c36fbe194634a1f33b62d3271825bcac2848414a35c6b83665b6db2113d77e80e9d39624fafc73ae6902ce60c902e3b8d928e29514229183db5180f3ea6ddceb47dd2c399c98b86faac8ed0abc070352a689deb4c603ffa94122d4a3362eed99f1665a59c02fc23d68b33f5c8650a7cae0ece42aba20d6ef61e4e50d8f04fcb722084f9ae186969f1534495d249c09b9be9dc7fc78b3e88d3a6179dfd46d1d2d6e560c5c5bd22c2e8530a9e19a707f6210cac3ba1e0b9bdae98f6ee14cf608eeed244eeed057186fd622c671a42ca003464d1b502f2507cb77453ab611c0499ba60f243d1ca17f5c7d9aeb64d1eba9c195f942ec1065627d5d778b8ecfa8fcb641d790b42e8523e10381b269733d8220d93bc8aa84ba14bb06754a3054afecba29b9b00a50a1d6111b314ce0cceac3650b0f434bb37a1e993f41b9db74c59fa7211bb249e969244c8b7985b4ef23459c6c97e8dc71e079116ed7f53e5a433e9b69d6a60d02c8d7b96bd7c58e5bcda614b50a6d40fc6f9e06a8446fc5c3822c61f79304cc66b6026bc23d92fe609fb4ca60552b568bb21c206f6ff9bcdad23d592f0ddff907ebf579133799f1452e9afaa0fb65236de20b73b0834f098f54e5a08647bf103b64ea3ba4b495416a2c7fd4e2be21da3f50596999c3b2ec53860bdb212d6af710f6f22e24a0bce71d028dfe3454070daa41e97f6ded8e5376cb69e0494e8f639f6c433be1bebe5460191ee6cb877c8002b751c30e1f43efda92624a1407f75529ba02939542c8d8fe2a93ea91d7e8a09b4e265da657a8d37363f22b3c48310441ab3f195fa85d175dbb33b683ee97256233a638ec09c1304dc97d080b2ab02f1112d3b47342ff0e6416f066e4ab20dbd4bbfe3c6f46f8d866da4e90e74c2e683d701e080977a539c7a73b068ad92919eef839ddbd43307d6c3d8afba78d8fc7ef4422c6e85d79b6c4dd24e3e20ec2a6fc0794379be8dacf1f33c78c60fa542553301f7426f0e0d559361ec68d6b71793012544c2089c1244566e3a1dd32590360d5f06f9ee220d6895d40c978e82ae3aaf8832c8f9e8091543a30fb5441b062dfd76f6eb017ce28c4f62e79ab0d09ae6f3a472dca4fa00b4a68070b0a1a764cd81b2627e5d590e71c7a96a8983057277a30857ad8d0f9da9847c639fab61405421baba4f892bc7abe1d2588257e34426aa3299d91eb362dbf5971758e14a3c6ab8615a9ba9e73346ecfea5644d3d534e926ceda29be7354bd50d0191f95b6717cabcc1a6dbc27c5c2293f5a9f2b98e2e25c0a5e49c2521afe664f5d223c2212821245c45743f820a0b1daf692906a00a76855919edd9bd4fa02798eba881bc56ed3c0000f6077359dc6477d96ce3b5195f136c8b996b5a3588698155a9237d830337e1689b28822c3f93144f70988e4b67df55fde989ffaa9c6b670d758e131cea07197642990c6bfef34d0f7ba641d44ea4a20f2ff205e7daa97b5c16a1e45135976ece160910b37c93deaca2cf4b69d3184bfea98c1e36e2755b7d50227681d6d5eaa1b95b717dc2545fb8e01c3be462b9a199286e6324528fd6ed7b5e2d4aeaede0b5b4f3f9646de3f3cfc0a95a57dfc4923c8fd8d4dc7d11afe5e3c29feefecb9631df296717f503b62f1083652c0a308737216909b29b5557ba2d130d98d22766a06a7d9b0d5321cd24bb9618545284b31ce187345ea1ebae62143bf7b127b1cc9d39eec00eaea695e3ada64f0806d102f470739dd0feb562fc9c53678c2b4fa403f5fcf7c4b948c22ef83ac26d069103b5aba2ff5604ef4d8d186d07729d844debd584e63d8cea9987e99fede3863d70d803ef8aff9877b95cb4be0b74d645f7110d2d57a949b71252132e44e5767a59776a384d6721b6b1a1c232f558b8da123a20b6f4a40aef0cea000e6d160a199ee499c260c510d21993c3e63a296b69a4b3160afaa2974a2a87ce163510ff6dba95bfc5a8aff4dea4a5672576dc0a3242ff859e4a9c85d79b22eb664a42e7567923316cd2eb9458a3519060d786d6b4800052e904eb84e3d7afad7139b7cb7bf07553cd4990946a7aae7ee800d0c5ad105cf414de215d474ffbaf677a9a1e055468747f2a951bb0488f3f04ce19b4c877eec6fcdfb074e45f65b61a719d5cc1243029279cee39af1af5e12962e38162e687e52dad0a73a4587683b8678e07f6ae2bc592c4866515c6321995e6db2f963e76ef774967641041263069d75a9842d1807c6762e012cb1ccb7580a1481d57e2f4afec648d0a35f6223a408e5d381ed7fbb42061810f71ec8278231b571d239fe17d962e5fc86dd1854a05ca78de0d68d4a51be2c55c02a63139a2676ab86e2bd09ec0792543c37b4764b29f49f45630fc8ba3d52d11e154fb5551e81128d208227eb2daa54fe401836dcc554a40884da87eb61d676b5bd1530dcabc2495bc21b5794d31a774983a4b57c94fd0a567e9a025d8f14b32fd2d33ce4f566955b4472391db871fa8c1df5912a430c84a3c0fa947c0af6b15ccae8c78b3b353c4b3619eadb424e00006d3d68c098db578447fd81f297c5ee612066ca28b798f4fd483d81a8591633cfb0963e868adfdac228abeea7d58481cd71ced89a7f5f2aa3c46c78d643c2c28e4fa050637edb7e9211d8e979f32696c47b30e8f41c31be1760aad709a6dee6ba8f9c6225616a1849e0b93d10895c6c781ca9643458aa0cec51e7601fcc53c8c6e54b95f7e97ddd501d59618ec379aebf5753d8a6a1b5824068061a37047e01c2edb64f9b277f23ac7c691e4ef77fb776987d569a7f5b0a3e53b53b36968a4a185e3af6932ebbb925041d17b11fd3676194da170ce955a12e8677f3e70758712de10189a08824dcfded7789064c72b784c236fb9fa2b077cda4c52824cbc244efd7c4bfda26b7ecfb528b56bf744c95a8ab542ce9cda4352989173fced5ad996361db5d41d158794a43d0857352abd23758a3878b67252c6240151abca3dcd3c7c3cc3080b4552b3de7c7fff1a5265cb43dadb3e692b7f1acfa8f2ac44a9a61db4ce46c6e6dfdb128f91c0303520c30431eb136c19213637c304eb0b1a6ff9d718b80b001a9022e390559add74dcd8079929da3a00c6a535b80675728d6931c0d227bf8e08c74366fbf2348205015751f8a1439815099525caa93428133f406958eec1eb2420c3be1cb9e07fa62eb4a747b71d41c0ad9419ce30e0a1e4473109e160a264000899a043d4e31303ad876877d9657a8229bb1fc7f1562b7b0a070f79df913c0f446b9fba72bb189fa4278020407a16b9d7012af17aa2029d9eb96194d60d0c0e6d7fbb4c48c74cee288dc6c379ebf52a867b4bdbd7dee3ee44c37f02ce9ceca97ecc9ec5cd59124b254399db08b586bb6f0a06256d2a24140a526c9f1a56d4bc1ea3b39aa7b82c28939fc8242160c230761fafa667ac45d1a85dbe0da5c37c0a06dd58c271ff5863628cd0f3f631a2f60d4a6f3a67d30f199105bcf1ae201227b8afd643469e14b4f6d57983e0a7014124a8b971a972ceeff37d004bcec399aec69e33215e7a4cbdda06c223ef320765c4ef98dc92cbdd34d2ab230c01169be9ae72a5ef5449ccd98f23367f2eeb1c8f583c9020a588536ae3b9a643dcd327e2745472d659e635a3767170975f493921bfe850db1e2624814455bd73cfb9bcf26569617cd2e5c3ffc414d2af4646dba158805812bb8747b2754b6bd6dc03e48768564a13546833ab09cd1fa262889707b0eb96db185fa5de7f74311626f667f23a3ecf3eeac91178ed64ed21d1d8f3bf0f714c550e94a576f239d5e5d9f58dd7c81ac3ecaebee1608ecbc348462e79fe6ccd016a142dc986209f090db70e4cf858c118ebba56fd517f5c4987ccdc894da6d37f8f45f2d2ce6b048a37caa79dd11c37385b31e9b7efa307aeeb6f3adccad4fe61480c6994bcb7b11f7a2eef4ca798b88ffe777030ba1cda445ce64b17629ee43aac54c6d7360b50055e3eace3d3c2cf389255379d54c245b2478764f821879a1f1c1a81f964e3dfca6f693a6d59f57e051abb8ddc4345ebad6491118a5a968f27925d74da0b30cdf63351aa56e43b08c43cf5ce9ae539ddb3454c56961e32881e3b698fe34db21946ef33ae97db7350a6199630ef59f60f9481803db03ef3652039d0ed66b0324ef9b32eede7612ebabd952c5b72ce04c8fd4fc1df20044303f69bbb92ad36340dce9"}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000001280)={0x5, 0x8, 0x1, 'queue0\x00', 0xffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f0000001340), 0x2, 0x201200) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001380)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000013c0)={{0x1, 0x3, 0x32c, 0x3}}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001400)={0x80000001, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, r1, {r4, r6}}, './file0\x00'}) close(r1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f00000014c0)) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000016c0)={&(0x7f0000001540)=[0x0], &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x8}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x6, 0x2, 0x2, 0x9, 0x2, 0x1}, {0x8, 0x8000, 0x5, 0x80000001, 0xb, 0x4}]}) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000017c0), 0x281040, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000001800)) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r1) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000001840)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001880), 0x2041, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000018c0)=[{0x3, 0x22, 0x6, 0xd4, @tick=0x7, {0x70, 0xdf}, {0x6, 0xea}, @control={0x1c, 0x232e77e7, 0x1}}, {0xf, 0x1a, 0xad, 0xa, @time={0x7, 0x4}, {0x2, 0x32}, {0x5, 0x4}, @queue={0x12, {0xa}}}, {0x3, 0xa, 0xf, 0x2, @tick=0x7, {0x6, 0x60}, {0x6, 0x8}, @result={0x4, 0xfffffff6}}, {0x6, 0xf8, 0x1, 0xd, @time={0x3, 0x1}, {0xd, 0x3}, {0x0, 0x5}, @addr={0x5, 0x8}}], 0x70) 13m53.494983206s ago: executing program 1 (id=2978): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 13m53.434393676s ago: executing program 1 (id=2979): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405515, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x3, 0x0, {0x9, @vbi={0x7, 0x1f, 0x34565348, 0x302780a, [0xb7f9, 0xa56], [], 0x2}}}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x541b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0xfac0b000) 13m53.294944159s ago: executing program 1 (id=2982): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000080)=""/1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000680)={0x1, 0x43}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000000)={0x0, 0x78}, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0xbb2ab84}}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0xe}, 0x2) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 13m38.221346854s ago: executing program 33 (id=2982): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000080)=""/1) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000680)={0x1, 0x43}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000000)={0x0, 0x78}, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0xbb2ab84}}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0xe}, 0x2) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 12m58.874117881s ago: executing program 5 (id=3324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/169, 0xa9, 0x8, 0x0, 0xfffffbff, 0x986, 0x9}}, 0x120) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/150, 0x96, 0x8, 0x1, 0x7, 0xa24, 0x9}}, 0x120) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000040)={0x6, 0x40a, 0x80000000, 0x0, 0x17, "2526bea834475905721f036e28a00a6e432b20"}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) read$FUSE(r7, &(0x7f00000017c0)={0x2020}, 0x2020) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 12m55.321543107s ago: executing program 5 (id=3338): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x491, 0x0, 0x2}]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 12m55.018853763s ago: executing program 5 (id=3341): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv2(r0, &(0x7f0000000000), 0x0, 0xb, 0x4, 0x11) 12m54.855841846s ago: executing program 5 (id=3343): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4, 0x3, 0x48, 0x9, 'syz1\x00', 0xfd6a}, 0x0, [0xb, 0x1517, 0xe, 0x8, 0x5, 0xfffffffffffffff7, 0x8000000000000001, 0xf67f, 0xae, 0xd8, 0x4, 0x2, 0x3, 0x3, 0xcb, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x2, 0x5, 0xe772, 0x6, 0x80, 0x7, 0xd, 0x2864, 0x5, 0x4, 0x0, 0x8, 0x6, 0xb653, 0x5, 0x4, 0x1be, 0x1ff, 0xbf98, 0x9, 0x2, 0x5, 0x1, 0x7f, 0x4, 0x0, 0x1, 0x0, 0x50d, 0x964, 0x4, 0x7, 0x4c, 0xa, 0x80000000, 0x100, 0xff, 0x5, 0x8bd8, 0x9, 0x0, 0xc, 0x9, 0x0, 0x0, 0x8, 0x1, 0xa, 0x8000000000000001, 0x3d72, 0xfff, 0x5, 0x401, 0x1, 0x0, 0x7ff, 0x6, 0xff, 0x2, 0x7fffffffffffffff, 0xff, 0xcd0, 0x9, 0x5, 0x979a, 0x7, 0x49b8, 0xa, 0xfffffffffffffffe, 0x0, 0x3, 0x9, 0x8000, 0x1, 0x0, 0xfff, 0x4, 0x2, 0x2, 0x9, 0x4c3e, 0x4, 0x2f, 0x6, 0x2, 0x241c, 0x7, 0xfff, 0x8, 0x5, 0x4, 0x2, 0x0, 0x2a8b, 0xfffffffffffffff9, 0x752, 0x6, 0x100000001, 0x5, 0x0, 0x1ff, 0x8, 0x4, 0x8f, 0x40000000, 0x165, 0x9, 0x14000000000, 0x1]}) write$cgroup_devices(r0, &(0x7f0000000540)={'a', ' *:* ', 'rm\x00'}, 0x9) read(r0, &(0x7f0000000580)=""/72, 0x48) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000640)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0x4, 0x2, 0x30179d76, 0x80000001, 0xdc6, "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"}}, 0x1118) write$cgroup_devices(r0, &(0x7f0000001780)={'a', ' *:* ', 'wm\x00'}, 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x1010, r0, 0x8b615000) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000017c0), 0x119000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000001800)={0x0, "6ad599752c066645220ce02649d5850b6cbb90b30cd0a60f80172bafbe734b30"}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000001940)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001840)=[{}, {}, {}]}) read$FUSE(r0, &(0x7f0000001980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f00000039c0)={0x20, 0x0, r3, {0x4, 0x4, 0x4, 0xfffffff7}}, 0x20) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000003a00)={0x1, 0x0, @pic={0xc0, 0x0, 0x7, 0x2f, 0x8d, 0x9, 0x0, 0x1, 0x9, 0xfe, 0xfd, 0x5, 0x0, 0x2, 0x90}}) write$cgroup_int(r0, &(0x7f0000003c40)=0x101, 0x12) write$binfmt_register(r0, &(0x7f0000003c80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2, 0x3a, '//', 0x3a, 'syz0\x00', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x30) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000003cc0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000003d00)={'macsec0\x00', 0x400}) read$FUSE(r0, &(0x7f0000003d40)={0x2020}, 0x2020) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000005dc0)={0x2, &(0x7f0000005d80)=[{0x7, 0x8, 0x8, 0x6}, {0x7, 0x4, 0x0, 0x2f1}]}) write$binfmt_register(r0, &(0x7f0000005e00)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x40, 0x3a, '/dev/uhid\x00', 0x3a, '@#!', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x43, 0x4f, 0x4f, 0x46, 0x46]}, 0x3b) lseek(r4, 0xffffffffffffffff, 0x2) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000005e40)={{@any, 0x8}, 0x800, 0x7ff, 0x800, 0xacd, 0x6, 0x0, 0xc, 0x3}) write$UHID_CREATE2(r1, &(0x7f0000005e80)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x18, 0x8, 0x5, 0xfff, 0x7c6, 0x9, "69030f78096aa46a4cc54051f0837e568528dbe36d49f393"}}, 0x130) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000005fc0)={{0x8, 0xff}, 'port1\x00', 0x4, 0x101001, 0x6, 0xff, 0x1, 0x853, 0x9, 0x0, 0x2, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000006080), 0x4000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000060c0)={'vxcan1\x00', 0x2}) openat$random(0xffffffffffffff9c, &(0x7f0000006100), 0x1, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000006140)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000061c0)=0x8000) 12m54.006440426s ago: executing program 5 (id=3350): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x5, 0x0, [{}, {}, {}, {}, {}]}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 12m53.845478596s ago: executing program 5 (id=3353): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4000, 0x3234564e, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {}, {0xa8}, {0x3, 0x2000}], 0x0, 0x0, 0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), r7, 0x0, 0x1, 0x4}}, 0x20) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'virt_wifi0\x00', @random='\rh\x00 \x00'}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x1, 0x2, 0x3}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000080)) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xe5772c680540e7d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000140)) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 12m38.794294966s ago: executing program 34 (id=3353): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4000, 0x3234564e, 0x2, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {}, {0xa8}, {0x3, 0x2000}], 0x0, 0x0, 0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), r7, 0x0, 0x1, 0x4}}, 0x20) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'virt_wifi0\x00', @random='\rh\x00 \x00'}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x1, 0x2, 0x3}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000000080)) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xe5772c680540e7d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000140)) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) write$dsp(r9, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 9m18.54404217s ago: executing program 4 (id=4771): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x4, 0x1, '\x00', 0x4}, {0xfe, 0x2, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x2}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0xa}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa, '\x00', 0x5}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x43, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f046}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 9m17.619151089s ago: executing program 4 (id=4775): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x285) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock me'], 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000180)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000"]) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc02c5625, &(0x7f0000000080)) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 9m17.347767732s ago: executing program 4 (id=4778): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x587302, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={{r0}, 0x8, 0x146e, 0x8}) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000440)={0x0, 0x8, 0x0, 'queue1\x00', 0x4000001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0xfffffffe}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x4100, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 9m16.799793896s ago: executing program 4 (id=4785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) r1 = syz_open_dev$usbmon(&(0x7f0000000cc0), 0xa, 0x2) close(r1) r2 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) preadv(r2, &(0x7f0000001200), 0x0, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000002c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000740)={{@my=0x0, 0x3ff}, {@any, 0x40}, 0x400, "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"}, 0x418, 0xffffff90}) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r8 = dup(r7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r8, 0xc01064c1, &(0x7f0000000100)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 9m15.685847425s ago: executing program 4 (id=4793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0105303, &(0x7f0000001280)={0x200000}) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) dup(r1) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc0105303, &(0x7f0000001280)={0x200000}) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r3, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) (async) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) 9m15.279940746s ago: executing program 4 (id=4795): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200982) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000200a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x6, 0x5af, 0xab1}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x4, 0x200}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x34000, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000240)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) r8 = dup(r5) mmap(&(0x7f0000288000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0xd7f98000) r9 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x81) write$rfkill(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m59.913673209s ago: executing program 35 (id=4795): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200982) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000200a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x6, 0x5af, 0xab1}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x4, 0x200}) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x34000, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000240)={0x90, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}}) r8 = dup(r5) mmap(&(0x7f0000288000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0xd7f98000) r9 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x81) write$rfkill(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 7m43.636203145s ago: executing program 6 (id=5332): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f00000001c0)={r1}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 7m43.419682705s ago: executing program 6 (id=5335): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000080)=""/145, 0x91) (async) read(r0, &(0x7f0000000080)=""/145, 0x91) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) preadv(r0, &(0x7f0000002840)=[{&(0x7f0000002700)}, {&(0x7f0000002740)=""/18, 0x12}, {&(0x7f0000002780)=""/184, 0xb8}], 0x3, 0x1, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000001dd0000000000ff0f000000000000"]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000140)={0x30, 0x2000, 0x3c94, 0x78, 0x40, 0x4, 0x4, 0x2, {0x0, 0x4}, {0x7fff, 0x8}, {0x101, 0x1ff, 0x1}, {0x7ce, 0xe, 0x1}, 0x3, 0x10, 0x209, 0x8, 0x0, 0x9, 0x8, 0x8, 0x7, 0xc86, 0x800010, 0x8, 0x10, 0x0, 0x1, 0x1}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)='\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="0d64d4d70e47064c4f9de55f1acce7d35643f103757511430d5245ec234b71d0358362241df4e05de76e85ae02f8cf9bf64f1c8d89154513282666d4a5a128cfdeb5ed2db9e45ab6b2e54a9ac409a9dfaebcbd141dd5f704d1c574047b7f61e7107191cea60eacb008cb6773e289782b7df2e50e376d5a97afdef071140cbe44a36b7b3009b7f9fb28664336b42f0de7bb581d0d6521c1e2ffb788e013eb4d05e4a388f184575e9fff5b1dfc92ba2d91045e3a4402f65a139b79676e3a2058a694ae0f93eb78109feeb2314e5bb04c51b46040a9f97ee51429124d744b58d6e6289c831a3a59da07b32507c85c9619e38d0542d1f6728923", 0xf8}, {&(0x7f0000001300)="0912a3e7495470811878da30923941e912628c9ae1fa5641329c8c067577ecfd746a9bfab6a827957ad6086958055f49c1fcb5e5e8914d846c51e72ce88b6e0cab53f148c49085824ecb22900c9715b727260b08ae65797d", 0x58}, {&(0x7f0000001380)="e7b3a5dfe8d458a10149b52e9554ac88397e594559ea98e3fb66753b2ff0f7adf9a4e43caaff62d16c22d5ffa2b2c9082e1c34c9cd0983886b5159e67a863fc9a0d418d5132a60b6edfc6ba1d57dfeb3bec8e8f1d277e3ed8f6e7d26a3343b40d193cb0d6ebfb5f6b65a6caa386add8f42ec33edd542239272bc2b1ae98580b5db53dd446aea67ec3d19456ef81b4cd9d6b801b88393c5498b4eff15c79d941024c769a5beb3073cd911d3850be2574015ce67140c28b5ad993a250b8d384c048eeda822b12320198a6268b1957623b242", 0xd1}, {&(0x7f0000001480)="1a4f30cd8c9e9dc812f4f89bb079ffae0ac11ce995e880f2fba38be9a7676b5917c5ec5584cb5e0a7a27c74c90dfc93f0b23de1b0315133a508c93ba1e37508b3e02a04074588da6310bcabecb47d09f317d3609b330ead85f4ce5d80ae01369eaadf8316d6272f18c2bc70e1c56439b9d72aaab574a064714336a9a7f53b96270d83409969bb828b5f352f6b78f8d5cf54ef744d49fe00ff54942e8f1d95f338150492e21334c52b970d83827f1ca245fe94ee1d71527a74bf23d79b104b9", 0xbf}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="817f4e40e4a1256da564b5d10f8b0d64c5c827179df491d1c73072b87364fee364082d48fc575823253fff56fdb00f3e62e0bff21bf3052a1b71e9e39789b7bfbe21fe5d3e2191bc55eb357ca536099385f2431b783f15d5a84a29932b2c00b2e9261654103d6aa12308ba13a9b12fb35fc9d460c7764c82df89a7883f4d405b95045905d520b63e7e33371bdc9811b6cbb9f56776905aba2d78a450202116e64e70d5ca80f6", 0xa6}, {&(0x7f0000002600)="7c1f25024a153426fb83f99639d2a78d16d24f6910a2f522f499954b351bfc9c4abf4e45c7eb4282668148959982555fe058c8e06e5d2a002964d80ee1d845f25eaa0446bc661605", 0x48}], 0x8, 0x9, 0x9) (async) pwritev(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="0d64d4d70e47064c4f9de55f1acce7d35643f103757511430d5245ec234b71d0358362241df4e05de76e85ae02f8cf9bf64f1c8d89154513282666d4a5a128cfdeb5ed2db9e45ab6b2e54a9ac409a9dfaebcbd141dd5f704d1c574047b7f61e7107191cea60eacb008cb6773e289782b7df2e50e376d5a97afdef071140cbe44a36b7b3009b7f9fb28664336b42f0de7bb581d0d6521c1e2ffb788e013eb4d05e4a388f184575e9fff5b1dfc92ba2d91045e3a4402f65a139b79676e3a2058a694ae0f93eb78109feeb2314e5bb04c51b46040a9f97ee51429124d744b58d6e6289c831a3a59da07b32507c85c9619e38d0542d1f6728923", 0xf8}, {&(0x7f0000001300)="0912a3e7495470811878da30923941e912628c9ae1fa5641329c8c067577ecfd746a9bfab6a827957ad6086958055f49c1fcb5e5e8914d846c51e72ce88b6e0cab53f148c49085824ecb22900c9715b727260b08ae65797d", 0x58}, {&(0x7f0000001380)="e7b3a5dfe8d458a10149b52e9554ac88397e594559ea98e3fb66753b2ff0f7adf9a4e43caaff62d16c22d5ffa2b2c9082e1c34c9cd0983886b5159e67a863fc9a0d418d5132a60b6edfc6ba1d57dfeb3bec8e8f1d277e3ed8f6e7d26a3343b40d193cb0d6ebfb5f6b65a6caa386add8f42ec33edd542239272bc2b1ae98580b5db53dd446aea67ec3d19456ef81b4cd9d6b801b88393c5498b4eff15c79d941024c769a5beb3073cd911d3850be2574015ce67140c28b5ad993a250b8d384c048eeda822b12320198a6268b1957623b242", 0xd1}, {&(0x7f0000001480)="1a4f30cd8c9e9dc812f4f89bb079ffae0ac11ce995e880f2fba38be9a7676b5917c5ec5584cb5e0a7a27c74c90dfc93f0b23de1b0315133a508c93ba1e37508b3e02a04074588da6310bcabecb47d09f317d3609b330ead85f4ce5d80ae01369eaadf8316d6272f18c2bc70e1c56439b9d72aaab574a064714336a9a7f53b96270d83409969bb828b5f352f6b78f8d5cf54ef744d49fe00ff54942e8f1d95f338150492e21334c52b970d83827f1ca245fe94ee1d71527a74bf23d79b104b9", 0xbf}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="817f4e40e4a1256da564b5d10f8b0d64c5c827179df491d1c73072b87364fee364082d48fc575823253fff56fdb00f3e62e0bff21bf3052a1b71e9e39789b7bfbe21fe5d3e2191bc55eb357ca536099385f2431b783f15d5a84a29932b2c00b2e9261654103d6aa12308ba13a9b12fb35fc9d460c7764c82df89a7883f4d405b95045905d520b63e7e33371bdc9811b6cbb9f56776905aba2d78a450202116e64e70d5ca80f6", 0xa6}, {&(0x7f0000002600)="7c1f25024a153426fb83f99639d2a78d16d24f6910a2f522f499954b351bfc9c4abf4e45c7eb4282668148959982555fe058c8e06e5d2a002964d80ee1d845f25eaa0446bc661605", 0x48}], 0x8, 0x9, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) syz_open_dev$vcsu(&(0x7f0000002700), 0xfffffffffffffff9, 0x18d800) (async) syz_open_dev$vcsu(&(0x7f0000002700), 0xfffffffffffffff9, 0x18d800) 7m43.271641393s ago: executing program 6 (id=5338): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0xd, 0x10}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1f, @time={0xe9, 0x8}, 0xfd, {}, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x97872f8959804cf2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x97872f8959804cf2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000280)={r6}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000280)={r6}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x1, "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", 0x40, 0x5, 0x8, 0xf, 0x10, 0x0, 0x2, 0x1}, r7}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x1, "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", 0x40, 0x5, 0x8, 0xf, 0x10, 0x0, 0x2, 0x1}, r7}}, 0x128) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x9}}) close(0x3) read(r1, &(0x7f00000002c0)=""/133, 0x85) (async) read(r1, &(0x7f00000002c0)=""/133, 0x85) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000500)={r10}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000500)={r10}) r11 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r13 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205649, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=&(0x7f00000005c0)}}) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f020}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r11, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 7m43.16547451s ago: executing program 6 (id=5341): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4a2041) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x1, 0x12, 0x2, 0x11, "22bbd76d7f146ccfaafea5cb6c66dfc8f528fc886f334eb0693d30f96e69bdeaa67b0a13a1a7683f1849f2679d511c9fcc5c5585780a5c0a5fe302cbef871356", "b58b9b2cbdeb3a9f46bdd33d1c3ad2eaf0fcc92ac872f9c89eb140825637d12f", [0x4, 0x4]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0xfffffff7, 0x5, 0xd, 0x11, "47e5ffc707b9e147b5acbfcf04a24c5af136faa8395679c1ed258075e8c5e0bca2423dff6f97647a8ede305ff47ff1ab505633c308bce1f2b130d162ca3d59df", "27882b492b765ff104600a3c5f6c6c4f78f93bc202d4dcaaff7eb83f0616230e", [0x718, 0xfffffffffffffffd]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000001c0)={{0x0, 0x0, 0x80}}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000002640)={0x10201, 0x180, 0x3c0, &(0x7f0000002240)=[0x9, 0xd3, 0xfffffffffffffc00, 0x8000000000000000, 0x81, 0x3ff, 0x16, 0x2, 0x2, 0x6, 0x2, 0x4, 0x100, 0x80000000, 0x2, 0x4, 0x6, 0x81, 0x4, 0x2e, 0x2, 0x80000001, 0x4, 0x0, 0xc, 0x800, 0x6, 0x5, 0xfffffffffffffff7, 0x7, 0xc, 0xffffffffffffffff, 0xf, 0x800, 0x4, 0x4, 0x200, 0x4b88, 0x7fffffffffffffff, 0x1, 0xb623, 0x9, 0x1, 0x7fffffff, 0x6, 0x7, 0x6, 0xb, 0x5, 0x7, 0x5, 0x5, 0x6, 0x3ff, 0x6, 0xfffffffffffffffb, 0x8001, 0xcb26, 0x9, 0x2aa, 0xb, 0x0, 0x300000000000, 0x5, 0xffffffffffff50cd, 0x7, 0xfffffffffffffa3a, 0x0, 0x6, 0xb812, 0x6d, 0x4, 0x9, 0x0, 0x0, 0x8, 0x6, 0x4, 0x6, 0x1ff, 0x9137, 0x5, 0xae30, 0xffff, 0x7ff, 0x1, 0x5, 0xfff, 0x4, 0x80000000, 0xc, 0x9, 0x1, 0x7, 0x6, 0x6, 0x2, 0x89e, 0x38, 0x9, 0xffffffff80000000, 0xffffffffffffff00, 0x9, 0x80, 0x1, 0x100, 0x100, 0x3, 0x7fff, 0x3, 0x4800000000, 0x4192ff5c, 0x40, 0x9, 0x0, 0xfff, 0xfac4, 0xe, 0x13c, 0x5, 0x0, 0x8, 0x800, 0x0, 0xbc, 0x9, 0x2, 0x800]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000002680)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000026c0)={0x4, 0x0, [{0x6, 0x268, 0x3, 0x0, 0x8, 0x4, 0x3}, {0xc0000003, 0xfcb, 0x1, 0xd, 0x80, 0x1, 0x9}, {0x80000007, 0x7, 0x5, 0xd, 0x7fffffff, 0xffffffff, 0x8000}, {0x80000001, 0xd, 0x6, 0x9, 0x80000000, 0x9, 0xc11}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002780)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000002b80)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x64a, 0x5, 0x80000000, 0x9, 0x3, 0x1, 0x9, 0x8, 0x873e, 0x800, 0xfffffff8, 0xc4, 0xbd, 0x6, 0x594, 0x8, 0x3, 0x7, 0x6, 0x8, 0x3, 0xffffffff, 0x8, 0x5, 0x8, 0x4, 0x400, 0x1, 0x7, 0x0, 0x8]}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000002c80)={0xb, 0x3, 0x4, {0xfffffff8, 0x0, 0xda30, 0x3}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002cc0), 0x40400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002d40), 0x10000, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000002d80)) ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000002dc0)) ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f0000002e00)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000002e40)={0x0, @reserved}) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000002f00)) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002f40)={0x1fd, 0x4, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002f80), 0x8000, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000002fc0)=""/194) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000030c0)={0x1, 0x0, 0x103, 0x3, {0x7, 0x2, 0x1, 0x540}}) 7m43.077371432s ago: executing program 6 (id=5343): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDENABIO(r5, 0x4b36) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$FUSE_DIRENT(r1, &(0x7f00000025c0)=ANY=[@ANYBLOB="e001000000000000", @ANYRES64=r2, @ANYBLOB="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"], 0x1e0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000013c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 7m42.799343436s ago: executing program 6 (id=5347): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 7m27.760124597s ago: executing program 36 (id=5347): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 1m5.391840712s ago: executing program 0 (id=8151): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000002f80)={0xa0, 0x0, r3, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r4, r5, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, r4, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) (async, rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (rerun: 32) r7 = dup(r6) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044941, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) (async) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1m4.951782452s ago: executing program 0 (id=8154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000740)={0x800006dc, 0x0, 0xfffffff9, 0x7f, 0x0, "1012a2c2e0d997451fe550bd026388080d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000040)=0xa) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async, rerun: 32) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 1m4.027823363s ago: executing program 0 (id=8161): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001240), 0x4a300, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x2000, &(0x7f0000156000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x284343) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0) r7 = dup(r5) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) write$cgroup_int(r9, &(0x7f0000000040)=0x5, 0x12) write(r9, &(0x7f0000000200)="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", 0x1000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000001200)={0x5, 0x6, 0x2}) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0xfffffffffffffffa) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000001c0)={0x4, 0x6, @name="4d76755d37d19a03a10c933a805a1cbd05770bdb63ecb25680ead09c8177e703"}) 1m2.599567797s ago: executing program 0 (id=8171): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1m1.348223749s ago: executing program 0 (id=8177): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2b8200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f00000001c0)={0xa0, 0xfffffffffffffffe, r2, {{0x5, 0x2, 0x2, 0x6bf, 0x80000000, 0x9a, {0x1, 0x2, 0x100000001, 0x8ed0, 0x6, 0x1, 0x6, 0x7, 0xe, 0x2000, 0x9, 0x0, r3, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000023c0)={0x3, @raw_data="c3587050152bc5d3c1d970bd76d3b2e0728b5e53469bf7e5daccb0553d8866f1dfcae8af52c3610fe48c74c7239f9b11c20eb977b1880f07f5bb885a7fda1a62fe9c579d7fc5212e154ca3cfb47d591c0111e7d8b9f40cf5729489e0815112306327990649772ca2e974d8411779b0ff2bd8375256ef2c22bebfa113f32a9b96d325a8873e27f494d68f456acdceb62ebc60e413e7583d31362910ec845a56b6bd88df0b01964927bafeaac7508fb0d12edf4ff51e8a16bbe154971f5e857fed045cba6b1086711c"}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) write$FUSE_DIRENT(r6, &(0x7f00000022c0)={0xe0, 0x0, r2, [{0x2, 0xb7b7, 0x6, 0x10, '.\'%\x0e#\\'}, {0x4, 0xfffffffffffffffe, 0xa, 0x5555, '&@^..%!]$-'}, {0x0, 0x0, 0x1, 0xfffffff7, '-'}, {0x4, 0x3, 0x2, 0x3, '){'}, {0x2, 0x9, 0x3, 0x36, '}-^'}, {0x5, 0x8000, 0x9, 0x8, ')\\-&]^&$\xbd'}]}, 0xe0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1m0.342226429s ago: executing program 0 (id=8184): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xff7f, 0x84000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) read(r1, &(0x7f00000001c0)=""/157, 0x9d) syz_open_dev$loop(&(0x7f0000000040), 0xff7f, 0x84000) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) (async) read(r1, &(0x7f00000001c0)=""/157, 0x9d) (async) 44.607940033s ago: executing program 37 (id=8184): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xff7f, 0x84000) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) read(r1, &(0x7f00000001c0)=""/157, 0x9d) syz_open_dev$loop(&(0x7f0000000040), 0xff7f, 0x84000) (async) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) (async) read(r1, &(0x7f00000001c0)=""/157, 0x9d) (async) 32.658249006s ago: executing program 7 (id=8314): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000200)) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x0, "0092938eda08a5513db99d08fdae429e4ae4c5bac9dd8259be4ee64b32c65e0a", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000280)={"334f00d6daf062d63d5e4449e903f93e48fe794d00c0adb017e82000008982ac", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"26bbada7db9dcff9395cdb16b9a6db35", 0x0, 0x0, {0x2, 0x200}, {0x0, 0x3}, 0x1, [0x502495a5, 0x5, 0x5, 0x0, 0x0, 0x1, 0xfc, 0x4, 0x9, 0x80000001, 0xffff, 0xfac, 0x8cef, 0x6, 0x7, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x2, 0x0, [0xffffffffffffffff, 0xba43, 0x8001, 0x1, 0x5], [0x4d62a2be, 0x8, 0x2, 0xe, 0x444, 0x800, 0x3ff, 0x5, 0xc270, 0xfffffffffffffff8, 0x2, 0x1, 0x1000, 0x8, 0x2, 0xfcb, 0x1, 0x218b, 0x8, 0x7, 0x1aa5, 0x6, 0x9, 0x8, 0xff, 0x0, 0x2, 0x8000000000000000, 0x9, 0x7, 0xa, 0x81, 0x40, 0x6, 0x7ff, 0x4, 0x3, 0x0, 0x2, 0xd, 0xdc46ef5, 0xfffffffffffff800, 0x0, 0x7, 0x3, 0x90, 0x2, 0xdde7, 0x101, 0x6, 0xc, 0x9, 0x1, 0x5, 0x0, 0x2, 0x8, 0x100000001, 0x2, 0x40, 0xc, 0x0, 0xc000, 0x7fffffffffffffff, 0x0, 0xcdd6, 0xffffffffffffffff, 0xfd58, 0xfffffffffffffffe, 0x3cf, 0xda2, 0x8, 0x1, 0x1, 0xfffffffffffffffc, 0x1, 0x8, 0x77, 0x9f, 0xffff, 0x9, 0x1, 0x3, 0x4, 0x7, 0x0, 0xd, 0x7, 0x9, 0x1000000000000, 0x9, 0x10000, 0x1, 0x0, 0x1000, 0x4, 0x6, 0x10000, 0x100, 0x9, 0x35ba, 0x401, 0x100000001, 0x4, 0xffffffffffffffa7, 0x2, 0x6b6, 0x0, 0xa33, 0x3, 0x0, 0x100000001, 0x8001, 0xd, 0x9, 0x101, 0x80, 0x2, 0x4, 0x0, 0x10]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000880)={{r0}, r6, 0x1c, @inherit={0x68, &(0x7f00000003c0)={0x0, 0x4, 0x10, 0x6, {0x39, 0xe7, 0x10000, 0x4}, [0x2, 0x18b, 0x3, 0x6]}}, @devid=r7}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x7, 0x220000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r11, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000280)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x4, 0x2, 0x2}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 31.719345816s ago: executing program 7 (id=8317): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200), 0x111, 0x3}}, 0x20) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x101, 0xc3f3}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000002c0)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x40800, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000340)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x8302, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f00000003c0)={0x6, 0x6, 0x8000, 0x8001, 0x401}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000400)={0x8001, 0x5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r6, 0xc5cbb000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x0, 0x3, 0x1ff, 0xd, 0x7, 0x7, 0x3, 0x4, 0x3, 0x4, 0x5, 0x3}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000540)=0x80) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x10004, 0x5, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000005c0)={0xfffffffffffffffb, 0x7}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDISABIO(r8, 0x4b37) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000600)={0x8, 0x9, 0x4}) splice(r3, &(0x7f0000000640)=0x5, r6, &(0x7f0000000680)=0x800, 0x9, 0x6) close(r0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xb}, {0xa, 0x4e21, 0x5, @mcast1, 0xe9c0}, r2, 0xc462}}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x341342, 0x0) read(r5, &(0x7f00000007c0)=""/113, 0x71) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 30.578686336s ago: executing program 7 (id=8319): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {0x10}, {}, @queue={0x0, {0x7a11f}}}], 0x1c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) (async) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r3, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x5) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (async) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003]}, 0x45c) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r5, 0x0, 0xfffffffffffffffd}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r5, 0x0, 0x2, 0xffffffffffffff01}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000040)={0x20, r5, 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) read(r0, &(0x7f00000001c0)=""/148, 0x94) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 30.481564568s ago: executing program 7 (id=8320): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7f}}, './cgroup/pids.max\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000280)={0x2, 0xffffffff, 0xb60a, 0x3, 0x6, 0x6}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f00000001c0)={0xcc, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r6, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 29.947325696s ago: executing program 7 (id=8321): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045017, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000001240)={@host}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000100)={@hyper, 0x4}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000200)={@hyper}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x1abe83, 0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) write$cgroup_int(r2, &(0x7f0000000040)=0x5, 0x12) (rerun: 64) 27.442083501s ago: executing program 7 (id=8323): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000b00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x700, @in6={0x1b, 0x0, 0x0, @empty}, @ib}}, 0x118) (async) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f0000000080)={0x2, "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"}) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000500)=@urb_type_iso={0x0, {0x1, 0x1}, 0x6, 0xc1, 0x0, 0x0, 0x4, 0x9, 0x0, 0x9, 0x1000, 0x0}) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200)={'tunl0', 0x32, 0x32}, 0x8) (async) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "57c01d2d5e6be09406b2220b6d783d0e"}) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0xfffff000) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r9, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r9, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffefffff8, 0x3fff}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f00004f9000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 25.590053753s ago: executing program 8 (id=8327): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000c8b000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r0, 0xd8e3c000) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 25.423847947s ago: executing program 8 (id=8328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc0984124, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x2, 0xe, 0xaa19, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x0) r5 = dup(r3) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 23.999899876s ago: executing program 8 (id=8331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xd000, 0x1}}, "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", "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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x16, 0x1, 0x0, "209b085355fa527abd4f389b708988e128359330eba3c822a0fd7e3fa6b39466"}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r6, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 22.704940099s ago: executing program 8 (id=8333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 22.217050115s ago: executing program 8 (id=8334): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x22802, 0x0) syz_open_dev$dri(&(0x7f0000001040), 0x80000000, 0x2000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x5) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001c40)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000140)=""/60, 0x3c}], 0x2, 0xffeffffb, 0x1007) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000000)=0x2) write$cgroup_subtree(r7, &(0x7f0000000b00)=ANY=[], 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x10000000014) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) 19.787706565s ago: executing program 8 (id=8341): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000240)=""/159, 0x9f) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x11, 0xff, 0x7, &(0x7f0000000140)={0x10, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) ioctl$BLKOPENZONE(r1, 0x40101286, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf74, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x38415261, 0x0, 0xa, [{}, {0x0, 0x2}, {}, {}, {}, {}, {0x80}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x8000006, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x7, 0xe, '\x00', 0x8}, {0x5, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x55}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xfe, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xe, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x6, 0x4, '\x00', 0x1}, {0x2, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x4, 0x6, '\x00', 0xc}]}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x3}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) read$FUSE(r6, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x88202, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.338001227s ago: executing program 2 (id=8344): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x501400) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x150, 0x1}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x501400) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x150, 0x1}) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) (async) 17.023814324s ago: executing program 2 (id=8345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/150, 0x96) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000440)={0x6, 0x8, 0x2, {0x9, @pix_mp={0x4, 0x3, 0x30364d54, 0x0, 0xf, [{0x38, 0x2}, {0x80a, 0xfffffffe}, {0x62c, 0x9}, {0x70, 0x4}, {0x6, 0x3}, {0x7fff, 0x9}, {0x7, 0xd}, {0x1, 0x5}], 0x1, 0x0, 0x4, 0x0, 0x2}}, 0x1ff}) ioctl$TIOCL_SETSEL(r2, 0x5452, &(0x7f0000002300)) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3008}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r6, 0x405, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000002200)="a4ed3c1b32e7338063115089624656b8acfdc2e716edaaccbfff2e940ebb67376178a868ae519f672a53f2a1a08123335ac9b8929b754f253763d1264b4b7e92c13b976ca6709f92e96427a60804bddf677b708983e5be1eab4d2e0f8a76cb40443a309c338971ba5294a017144bd4a75f695e91a0c59e21c90c3b6adfa84d5016d6b103a61a7e15ed38324f868b2a61cbe7c409c80d306944da9b1fa3b42d3ff93519d9c85df79b75e7ce54fe0e922b9938276c32795a4fe669c1e133ff5ed02aaf682a79183244d5ac1795c963d11aabc7bdb608f2f10e72e714a6fd16fb8304585db50cc2ad3ce1e6ae223248", 0xee}], 0x1, 0xf, 0x9) 16.815637203s ago: executing program 2 (id=8346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x381801, 0x0) lseek(r0, 0x7, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x1, 0x1, 0x5}}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x10010, r5, 0x7dfff000) 16.737542412s ago: executing program 2 (id=8347): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000001380)=[{0x1c}, {0x6}]}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x2000000, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x55) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f00000001c0)=""/159, 0x9f) 15.359548675s ago: executing program 2 (id=8348): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0xe, 0x4ee}}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000580)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x2, 0x8, 0x4, 0x2, {0x5, 0x9, 0x1, 0x5173c0ff, 0x0, 0x5, 0xff, 0x77a, 0x8, 0x4000, 0x494b880a, 0x0, r4, 0x9, 0x19}}, {0x0, 0x6}}}, 0xa0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0x8ec66, 0xff, 0x101, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x100000000, 0x8, 0x5, 0x5, 0x9, 0x9, 0x4, 0x2, 0x7, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xf0, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcda, 0x7, 0x2, 0x3, 0x2, 0x8005, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x7ffffffd, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x4, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 15.070858057s ago: executing program 2 (id=8349): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000240)) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x630440) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000280)={{0x0, 0x1, 0x1, 0x2, 'syz0\x00'}, 0x1, 0x400, 0x4003, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 4.034706631s ago: executing program 38 (id=8341): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x4, 0x12) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000240)=""/159, 0x9f) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x11, 0xff, 0x7, &(0x7f0000000140)={0x10, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) ioctl$BLKOPENZONE(r1, 0x40101286, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf74, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x38415261, 0x0, 0xa, [{}, {0x0, 0x2}, {}, {}, {}, {}, {0x80}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x8000006, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x7, 0xe, '\x00', 0x8}, {0x5, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x55}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xfe, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xe, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x6, 0x4, '\x00', 0x1}, {0x2, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x4, 0x6, '\x00', 0xc}]}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x3}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) read$FUSE(r6, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x88202, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 0s ago: executing program 39 (id=8349): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000240)) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x630440) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000280)={{0x0, 0x1, 0x1, 0x2, 'syz0\x00'}, 0x1, 0x400, 0x4003, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) kernel console output (not intermixed with test programs): ][T14968] kvm: kvm [14965]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 895.392024][T14977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 895.429655][T14977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 895.885447][T15009] input: syz1 as /devices/virtual/input/input173 [ 896.402479][T15042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.429499][T15096] kvm: kvm [15093]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 897.571641][T15108] syz.7.5708: attempt to access beyond end of device [ 897.571641][T15108] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 897.992882][T15123] kvm: kvm [15121]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 898.517444][T15156] random: crng reseeded on system resumption [ 899.840601][T15218] vivid-002: disconnect [ 900.322924][T15252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.761981][T15213] vivid-002: reconnect [ 900.900499][T15275] syz.2.5732: attempt to access beyond end of device [ 900.900499][T15275] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 901.160685][T15297] input: syz0 as /devices/virtual/input/input175 [ 902.711220][T15402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.750838][T15404] vivid-000: ================= START STATUS ================= [ 902.764195][T15402] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 902.813279][T15404] vivid-000: Radio HW Seek Mode: Bounded [ 902.824030][T15404] vivid-000: Radio Programmable HW Seek: false [ 902.867826][T15404] vivid-000: RDS Rx I/O Mode: Block I/O [ 902.883901][T15404] vivid-000: Generate RBDS Instead of RDS: false [ 902.902852][T15404] vivid-000: RDS Reception: true [ 902.914703][T15404] vivid-000: RDS Program Type: 0 inactive [ 902.935659][T15404] vivid-000: RDS PS Name: inactive [ 902.949321][T15404] vivid-000: RDS Radio Text: inactive [ 902.966406][T15404] vivid-000: RDS Traffic Announcement: false inactive [ 903.021749][T15404] vivid-000: RDS Traffic Program: false inactive [ 903.042432][T15404] vivid-000: RDS Music: false inactive [ 903.048092][T15404] vivid-000: ================== END STATUS ================== [ 905.188766][ T5158] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 906.427891][T15573] QAT: Invalid ioctl -2146933247 [ 906.437889][T15573] QAT: Device 2 not found [ 906.445111][T15575] ALSA: seq fatal error: cannot create timer (-16) [ 907.128364][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 907.135409][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 907.600197][T15631] program syz.0.5791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 908.066736][T15648] input: syz1 as /devices/virtual/input/input176 [ 909.305263][T15711] program syz.7.5803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.319062][T15718] usb usb1: usbfs: process 15718 (syz.7.5803) did not claim interface 0 before use [ 909.427227][T15726] QAT: failed to copy from user cfg_data. [ 911.238474][T15793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.393407][T15803] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 911.472044][T15813] input: syz1 as /devices/virtual/input/input180 [ 911.513052][T15807] input: syz1 as /devices/virtual/input/input179 [ 913.254406][T15918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.703614][T15953] loop6: detected capacity change from 0 to 524287999 [ 914.004032][T15965] CUSE: info not properly terminated [ 915.273617][T16002] rtc_cmos 00:00: Alarms can be up to one day in the future [ 915.587561][T16016] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1815377455.1651864365) [ 915.684839][T16020] tap0: tun_chr_ioctl cmd 1074025680 [ 916.249350][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.257078][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.265172][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.278595][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 916.291977][T14464] rtc rtc0: __rtc_set_alarm: err=-22 [ 917.528839][T16112] syz.7.5880: attempt to access beyond end of device [ 917.528839][T16112] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 917.559271][T16109] binder: 16105:16109 ioctl 40046205 0 returned -22 [ 917.653576][T16113] binder: 16105:16113 ioctl c0306201 0 returned -14 [ 917.738360][T16113] binder: 16105:16113 ioctl c0306201 0 returned -14 [ 918.454225][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 918.465701][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 918.477012][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 918.492385][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 918.505599][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 918.548397][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 918.565735][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 918.578418][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 918.590502][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 918.603750][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.227743][ T5216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.312331][T16204] binfmt_misc: register: failed to install interpreter file ./cgroup [ 919.572702][ T5216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.980320][ T5216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.351490][ T5216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.545240][T16142] chnl_net:caif_netlink_parms(): no params data found [ 920.658541][ T5838] Bluetooth: hci0: command tx timeout [ 920.683643][T16235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.707118][T16235] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 921.023398][T16142] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.030933][T16142] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.048778][T16142] bridge_slave_0: entered allmulticast mode [ 921.063797][T16142] bridge_slave_0: entered promiscuous mode [ 921.081466][T16142] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.100847][T16142] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.108273][T16142] bridge_slave_1: entered allmulticast mode [ 921.126508][T16142] bridge_slave_1: entered promiscuous mode [ 921.275629][ T5216] bridge_slave_1: left allmulticast mode [ 921.283565][ T5216] bridge_slave_1: left promiscuous mode [ 921.319555][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.380883][ T5216] bridge_slave_0: left allmulticast mode [ 921.386742][ T5216] bridge_slave_0: left promiscuous mode [ 921.402017][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.594219][T16458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.409327][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.549454][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.590634][ T5216] bond0 (unregistering): Released all slaves [ 923.748934][T16142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.854688][T16142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.303772][T16142] team0: Port device team_slave_0 added [ 924.500349][T16142] team0: Port device team_slave_1 added [ 924.809990][ T5172] hid-generic 009C:0008:0003.0015: unknown main item tag 0x7 [ 924.817482][ T5172] hid-generic 009C:0008:0003.0015: unknown main item tag 0x6 [ 924.848245][ T5172] hid-generic 009C:0008:0003.0015: unknown main item tag 0x0 [ 924.855746][ T5172] hid-generic 009C:0008:0003.0015: unknown main item tag 0x0 [ 924.899052][ T5172] hid-generic 009C:0008:0003.0015: hidraw0: HID v0.05 Device [syz1] on syz0 [ 925.251161][T16142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.270544][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.359867][T16142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.413344][T16142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.430214][T16142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.462989][T16142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.671856][ T5216] hsr_slave_0: left promiscuous mode [ 925.722766][ T5216] hsr_slave_1: left promiscuous mode [ 925.729073][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.768452][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.821102][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.836393][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.968019][ T5216] veth1_macvtap: left promiscuous mode [ 925.986343][ T5216] veth0_macvtap: left promiscuous mode [ 926.004118][ T5216] veth1_vlan: left promiscuous mode [ 926.016450][ T5216] veth0_vlan: left promiscuous mode [ 928.480610][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 928.720631][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 930.593565][T16778] input: syz1 as /devices/virtual/input/input182 [ 930.824285][T16787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.541085][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.547562][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.684036][T16142] hsr_slave_0: entered promiscuous mode [ 931.701943][T16142] hsr_slave_1: entered promiscuous mode [ 931.719924][T16142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.735917][T16142] Cannot create hsr debugfs directory [ 934.103029][T16142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.169029][T16142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.242441][T16142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 934.307664][T16142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.782763][T16142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.826000][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.846424][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.853687][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.889730][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.896953][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.026958][T16142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.646060][T16142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.787700][T16142] veth0_vlan: entered promiscuous mode [ 935.848039][T16142] veth1_vlan: entered promiscuous mode [ 935.906376][T17227] binder: 17223:17227 ioctl c0306201 200000000300 returned -22 [ 935.975250][T16142] veth0_macvtap: entered promiscuous mode [ 936.025036][T16142] veth1_macvtap: entered promiscuous mode [ 936.092514][T16142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.224813][T16142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.273045][T16142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.300639][T16142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.343561][T16142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.366158][T16142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.726543][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.764832][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.821500][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.848882][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.886986][T17298] program syz.2.5979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 936.925990][T17298] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 937.717169][T17346] CUSE: info not properly terminated [ 937.872313][T17348] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 938.219996][T17372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.619165][T17384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.742602][T17452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.755051][T17453] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 940.649038][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 940.651381][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 941.189028][T17550] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 941.512129][T17569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.537805][T17569] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 942.615533][T17637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.027289][T17673] sp0: Synchronizing with TNC [ 943.793497][T17706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.982262][T17712] block device autoloading is deprecated and will be removed. [ 943.990607][T17712] syz.7.6050: attempt to access beyond end of device [ 943.990607][T17712] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 944.006405][T17722] syz.7.6050: attempt to access beyond end of device [ 944.006405][T17722] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 944.592198][T17760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.591469][T17843] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 947.344722][T17894] input: syz1 as /devices/virtual/input/input183 [ 948.069674][ T49] Bluetooth: Error in BCSP hdr checksum [ 948.324718][T17945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.626607][T17951] nvme_fabrics: missing parameter 'transport=%s' [ 948.662564][T17951] nvme_fabrics: missing parameter 'nqn=%s' [ 949.566448][T17998] input: syz1 as /devices/virtual/input/input185 [ 949.701794][T18028] blktrace: Concurrent blktraces are not allowed on sg0 [ 949.711518][T18028] blktrace: Concurrent blktraces are not allowed on nullb0 [ 949.848435][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 949.855256][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 951.423217][T18105] QAT: failed to copy from user cfg_data. [ 953.418943][T18177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.136776][T18218] random: crng reseeded on system resumption [ 955.121776][T18267] input: syz0 as /devices/virtual/input/input186 [ 955.440709][T18279] loop6: detected capacity change from 0 to 524287487 [ 955.449964][T17048] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.458574][T17048] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.466747][T17048] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.485148][T17048] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.528191][T18284] loop6: detected capacity change from 524287487 to 0 [ 955.533042][T17048] Buffer I/O error on dev loop6, logical block 0, async page read [ 955.559015][T18284] syz.8.6153: attempt to access beyond end of device [ 955.559015][T18284] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 955.581713][T17048] ldm_validate_partition_table(): Disk read failed. [ 955.601008][T17048] Dev loop6: unable to read RDB block 0 [ 955.612188][T17048] loop6: unable to read partition table [ 955.624738][T17048] loop6: partition table beyond EOD, truncated [ 955.847976][ T5172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 955.848017][ T5172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 955.848045][ T5172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 955.848071][ T5172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 955.853404][ T5172] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 955.861463][ T5172] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 955.913786][T18304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 958.071962][T18430] input: syz1 as /devices/virtual/input/input187 [ 958.420153][T18449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 960.286409][T18537] binder: 18536:18537 ioctl 5000940a 200000001780 returned -22 [ 960.758284][T18560] input: syz1 as /devices/virtual/input/input188 [ 961.493771][T18592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.454638][T18659] input: syz1 as /devices/virtual/input/input189 [ 963.234487][T18708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.811404][T18766] can0: slcan on ttyS3. [ 964.989510][T18766] can0 (unregistered): slcan off ttyS3. [ 965.133668][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.181530][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.213008][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.230613][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.255014][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.293857][T18794] kvm: kvm [18793]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 965.313051][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.336009][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.366345][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.388365][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.416223][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.446619][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.477014][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.497507][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.525801][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.548462][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.578153][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.606049][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.623819][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.638319][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.658481][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.665946][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.711628][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.738203][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.758233][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.765711][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.811907][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.839148][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.869677][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.891916][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.918195][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.928421][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.951124][ T5900] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 965.988579][ T5900] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 966.236500][T18826] fido_id[18826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 966.445883][T18840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.013103][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 967.417561][T18889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.757960][T18906] syz.0.6269: attempt to access beyond end of device [ 967.757960][T18906] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 968.449018][T18934] syz.0.6273: attempt to access beyond end of device [ 968.449018][T18934] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 968.755935][T18944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.828917][T18943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 969.048637][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 969.056585][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 969.784918][T18996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.614430][T19073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.952171][T19099] random: crng reseeded on system resumption [ 972.553238][T19143] binder: 19140:19143 ioctl 40046205 0 returned -22 [ 973.322452][T19143] binder: 19140:19143 ioctl c0306201 200000000040 returned -14 [ 973.535044][T19200] binder: 19193:19200 ioctl c0306201 200000000540 returned -22 [ 976.287003][T19335] input: syz0 as /devices/virtual/input/input191 [ 977.093863][T19389] syz.7.6347: attempt to access beyond end of device [ 977.093863][T19389] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 980.664777][T19570] program syz.8.6380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 980.689706][T19570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.821292][T19612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.102086][T19739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 984.445204][T19757] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1685414191.2322281) [ 984.798743][T19779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.398561][T19809] program syz.0.6433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.005934][T19850] random: crng reseeded on system resumption [ 986.303436][T19859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.365129][T19861] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 986.988907][T19905] binder: 19904:19905 ioctl 40489426 0 returned -22 [ 987.295502][T19932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.503450][T19939] input: syz0 as /devices/virtual/input/input193 [ 987.731487][T19957] loop6: detected capacity change from 0 to 524287999 [ 987.753116][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 987.762839][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 987.771338][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 987.874219][T19966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.012376][T19977] binder: 19973:19977 ioctl c0306201 0 returned -14 [ 988.049677][T19979] binder: 19973:19979 ioctl c0306201 0 returned -14 [ 989.439634][ T5913] hid (null): unknown global tag 0xd [ 989.445714][ T5913] hid (null): report_id 0 is invalid [ 989.454166][ T5913] hid (null): unknown global tag 0xc [ 989.496657][ T5913] hid-generic 0040:0513:0007.0018: unknown main item tag 0x3 [ 989.536016][ T5913] hid-generic 0040:0513:0007.0018: unknown global tag 0xd [ 989.564740][ T5913] hid-generic 0040:0513:0007.0018: item 0 2 1 13 parsing failed [ 989.585315][ T5913] hid-generic 0040:0513:0007.0018: probe with driver hid-generic failed with error -22 [ 989.845937][T20069] program syz.2.6483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.035036][T20079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.225398][T20091] input: syz1 as /devices/virtual/input/input195 [ 991.737921][T20138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.890586][T20149] syz.2.6500: attempt to access beyond end of device [ 991.890586][T20149] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 992.107231][T20165] random: crng reseeded on system resumption [ 992.198538][T20167] QAT: Invalid ioctl 1074033169 [ 992.221471][T20167] QAT: Invalid ioctl 19297 [ 992.980254][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.987544][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.811056][T20278] input: syz0 as /devices/virtual/input/input199 [ 994.322084][T20301] input: syz1 as /devices/virtual/input/input200 [ 995.040853][T20342] autofs4:pid:20342:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 996.042663][T20413] random: crng reseeded on system resumption [ 997.092829][T20470] random: crng reseeded on system resumption [ 997.170676][T20476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.486370][ T30] audit: type=1800 audit(1750393492.095:34): pid=20503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6567" name=C1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB69E6F4048F2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778681AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D4A7BAEB62972F1A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE38D36B839E3CD54AE4933AD529888FDAC7BB08 dev="tmpfs" ino=689 res=0 errno=0 [ 997.538685][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.652039][T20511] misc userio: Invalid payload size [ 998.549828][T20555] input: syz1 as /devices/virtual/input/input202 [ 998.936516][T20575] syz.2.6582: attempt to access beyond end of device [ 998.936516][T20575] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 999.264636][T20598] dlm: non-version read from control device 202 [ 999.271267][T20597] dlm: non-version read from control device 202 [ 999.283615][T20597] dlm: non-version read from control device 111 [ 999.491314][ T30] audit: type=1800 audit(1750393494.105:35): pid=20613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6591" name="memory.events" dev="tmpfs" ino=726 res=0 errno=0 [ 999.512585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.927563][T20662] input: syz1 as /devices/virtual/input/input203 [ 1004.190020][T20808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1004.865762][T20840] binder: 20839:20840 unknown command 0 [ 1004.873545][T20840] binder: 20839:20840 ioctl c0306201 200000000540 returned -22 [ 1004.987822][T20840] can0: slcan on ptm0. [ 1005.168744][T20839] can0 (unregistered): slcan off ptm0. [ 1005.204245][T20865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.721181][T20889] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1005.942353][T20917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.240885][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.251195][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.271723][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.311080][T14464] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1006.354378][T14464] rtc rtc0: __rtc_set_alarm: err=-22 [ 1006.933018][T20957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.585660][ T1151] Bluetooth: Error in BCSP hdr checksum [ 1007.643402][T20978] autofs4:pid:20978:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1007.670825][T20978] autofs4:pid:20978:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1007.841616][ T12] Bluetooth: Error in BCSP hdr checksum [ 1007.908588][T20932] warn_alloc: 1 callbacks suppressed [ 1007.908607][T20932] syz.2.6657: vmalloc error: size 2244608, failed to allocated page array size 4384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1007.949438][T20932] CPU: 1 UID: 0 PID: 20932 Comm: syz.2.6657 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1007.949468][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1007.949481][T20932] Call Trace: [ 1007.949489][T20932] [ 1007.949498][T20932] dump_stack_lvl+0x189/0x250 [ 1007.949532][T20932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.949557][T20932] ? __pfx__printk+0x10/0x10 [ 1007.949580][T20932] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1007.949609][T20932] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1007.949638][T20932] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1007.949667][T20932] warn_alloc+0x214/0x310 [ 1007.949703][T20932] ? __pfx_warn_alloc+0x10/0x10 [ 1007.949742][T20932] ? __get_vm_area_node+0x28f/0x300 [ 1007.949769][T20932] ? vb2_vmalloc_alloc+0xef/0x340 [ 1007.949807][T20932] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1007.949865][T20932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1007.949892][T20932] ? vb2_vmalloc_alloc+0xef/0x340 [ 1007.949915][T20932] ? __get_vm_area_node+0x28f/0x300 [ 1007.949941][T20932] ? vb2_vmalloc_alloc+0xef/0x340 [ 1007.949964][T20932] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 1007.949991][T20932] ? vb2_vmalloc_alloc+0xef/0x340 [ 1007.950043][T20932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1007.950077][T20932] ? __kasan_kmalloc+0x93/0xb0 [ 1007.950105][T20932] vmalloc_user_noprof+0xad/0xf0 [ 1007.950132][T20932] ? vb2_vmalloc_alloc+0xef/0x340 [ 1007.950155][T20932] vb2_vmalloc_alloc+0xef/0x340 [ 1007.950177][T20932] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1007.950200][T20932] __vb2_queue_alloc+0x9bf/0x15a0 [ 1007.950246][T20932] vb2_core_create_bufs+0x765/0xde0 [ 1007.950279][T20932] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1007.950298][T20932] ? __mutex_trylock_common+0x153/0x260 [ 1007.950330][T20932] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 1007.950357][T20932] vb2_create_bufs+0x5b9/0xae0 [ 1007.950384][T20932] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1007.950406][T20932] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 1007.950433][T20932] vb2_ioctl_create_bufs+0x285/0x3f0 [ 1007.950461][T20932] v4l_create_bufs+0x190/0x2a0 [ 1007.950498][T20932] __video_do_ioctl+0xc98/0xdb0 [ 1007.950533][T20932] ? __pfx___video_do_ioctl+0x10/0x10 [ 1007.950572][T20932] video_usercopy+0x86e/0x14f0 [ 1007.950606][T20932] ? __pfx___video_do_ioctl+0x10/0x10 [ 1007.950629][T20932] ? __pfx_video_usercopy+0x10/0x10 [ 1007.950664][T20932] ? __fget_files+0x2a/0x420 [ 1007.950697][T20932] ? __fget_files+0x2a/0x420 [ 1007.950725][T20932] ? __fget_files+0x3a0/0x420 [ 1007.950758][T20932] v4l2_ioctl+0x18d/0x1e0 [ 1007.950807][T20932] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1007.950829][T20932] __se_sys_ioctl+0xfc/0x170 [ 1007.950857][T20932] do_syscall_64+0xfa/0x3b0 [ 1007.950877][T20932] ? lockdep_hardirqs_on+0x9c/0x150 [ 1007.950909][T20932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.950929][T20932] ? clear_bhb_loop+0x60/0xb0 [ 1007.950953][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.950972][T20932] RIP: 0033:0x7f0c20f8e929 [ 1007.950991][T20932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.951008][T20932] RSP: 002b:00007f0c1edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.951030][T20932] RAX: ffffffffffffffda RBX: 00007f0c211b5fa0 RCX: 00007f0c20f8e929 [ 1007.951045][T20932] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000004 [ 1007.951059][T20932] RBP: 00007f0c21010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1007.951071][T20932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.951083][T20932] R13: 0000000000000000 R14: 00007f0c211b5fa0 R15: 00007ffea3ee67b8 [ 1007.951114][T20932] [ 1007.951123][T20932] Mem-Info: [ 1008.323565][T20932] active_anon:8787 inactive_anon:0 isolated_anon:0 [ 1008.323565][T20932] active_file:1587 inactive_file:40240 isolated_file:0 [ 1008.323565][T20932] unevictable:768 dirty:47 writeback:0 [ 1008.323565][T20932] slab_reclaimable:11518 slab_unreclaimable:99954 [ 1008.323565][T20932] mapped:24502 shmem:1932 pagetables:1677 [ 1008.323565][T20932] sec_pagetables:0 bounce:0 [ 1008.323565][T20932] kernel_misc_reclaimable:0 [ 1008.323565][T20932] free:1283697 free_pcp:26292 free_cma:0 [ 1008.368709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.382975][T20932] Node 0 active_anon:35248kB inactive_anon:0kB active_file:6348kB inactive_file:160756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98008kB dirty:188kB writeback:0kB shmem:6192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12660kB pagetables:6560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1008.416672][T20932] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1008.449290][T20977] [U]  [ 1008.450273][T20932] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1008.509730][T20932] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1008.525569][T20932] Node 0 DMA32 free:1214252kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34896kB inactive_anon:0kB active_file:6348kB inactive_file:159448kB unevictable:1536kB writepending:188kB present:3129332kB managed:2557540kB mlocked:0kB bounce:0kB free_pcp:94156kB local_pcp:51756kB free_cma:0kB [ 1008.591681][T20932] lowmem_reserve[]: 0 0 1 1 1 [ 1008.596538][T20932] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1008.625588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.676911][T20932] lowmem_reserve[]: 0 0 0 0 0 [ 1008.687123][T20932] Node 1 Normal free:3905156kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11872kB local_pcp:8032kB free_cma:0kB [ 1008.718342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.762100][T20932] lowmem_reserve[]: 0 0 0 0 0 [ 1008.772219][T20932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1008.798214][T20932] Node 0 DMA32: 497*4kB (M) 27*8kB (UM) 99*16kB (M) 181*32kB (UME) 70*64kB (ME) 64*128kB (ME) 18*256kB (UM) 1*512kB (M) 3*1024kB (ME) 0*2048kB 289*4096kB (UM) = 1214188kB [ 1008.846194][T20932] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1008.878315][T20932] Node 1 Normal: 219*4kB (UM) 61*8kB (UME) 59*16kB (UME) 290*32kB (UME) 85*64kB (UME) 20*128kB (UME) 8*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3905156kB [ 1008.917816][T20932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.948402][T20932] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1008.957838][T20932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1008.988425][T20932] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1008.997860][T20932] 44699 total pagecache pages [ 1009.013406][T20932] 0 pages in swap cache [ 1009.017627][T20932] Free swap = 124996kB [ 1009.032959][T20932] Total swap = 124996kB [ 1009.041592][T20932] 2097051 pages RAM [ 1009.045480][T20932] 0 pages HighMem/MovableOnly [ 1009.068123][T20932] 425688 pages reserved [ 1009.072418][T20932] 0 pages cma reserved [ 1009.608363][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1009.610208][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 1010.313279][T21060] Bluetooth: hci4: Frame reassembly failed (-84) [ 1010.344356][ T3544] Bluetooth: hci4: Frame reassembly failed (-84) [ 1010.703516][T21075] Scaler: ================= START STATUS ================= [ 1010.721765][T21075] Scaler: ================== END STATUS ================== [ 1011.839820][T21116] loop6: detected capacity change from 0 to 524288000 [ 1012.330195][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1013.393900][T21182] usb usb7: usbfs: process 21182 (syz.0.6700) did not claim interface 0 before use [ 1013.455239][T21182] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1013.997664][T21216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.023640][T21220] binder: 21213:21220 ioctl c0306201 200000000300 returned -22 [ 1014.352300][ T30] audit: type=1800 audit(1750393508.965:36): pid=21250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6712" name="memory.events" dev="tmpfs" ino=917 res=0 errno=0 [ 1015.203321][T21301] Debayer A: ================= START STATUS ================= [ 1015.218250][T21301] Debayer A: Debayer Mean Window Size: 3 [ 1015.231447][T21301] Debayer A: ================== END STATUS ================== [ 1015.725728][T21329] kvm: kvm [21328]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 1018.426801][T21477] syz.2.6755: attempt to access beyond end of device [ 1018.426801][T21477] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1019.879676][T21539] binder: 21535:21539 ioctl c0306201 200000000640 returned -22 [ 1020.657588][T21536] binder: 21535:21536 ioctl c0306201 2000000003c0 returned -14 [ 1021.752981][ T1151] Bluetooth: hci4: Frame reassembly failed (-84) [ 1021.954605][T21621] input: syz1 as /devices/virtual/input/input206 [ 1023.768326][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 1023.775376][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1024.181117][T21717] vivid-000: ================= START STATUS ================= [ 1024.189140][T21717] vivid-000: Enable Output Cropping: true [ 1024.194931][T21717] vivid-000: Enable Output Composing: false [ 1024.201736][T21717] vivid-000: Enable Output Scaler: true [ 1024.207355][T21717] vivid-000: Tx RGB Quantization Range: Automatic [ 1024.214552][T21717] vivid-000: Transmit Mode: HDMI [ 1024.220011][T21717] vivid-000: Hotplug Present: 0x00000000 [ 1024.231252][T21717] vivid-000: RxSense Present: 0x00000000 [ 1024.236980][T21717] vivid-000: EDID Present: 0x00000000 [ 1024.271440][T21724] misc userio: Can't change port type on an already running userio instance [ 1024.298321][T21717] vivid-000: ================== END STATUS ================== [ 1024.337587][T21728] input: syz1 as /devices/virtual/input/input209 [ 1025.784093][ T30] audit: type=1400 audit(1750393520.365:37): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="{-((:/" pid=21795 comm="syz.0.6832" [ 1026.241399][T21822] program syz.0.6839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1026.283050][T21824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.432946][T21838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.621045][T21848] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1028.468891][T21972] random: crng reseeded on system resumption [ 1028.620000][T21976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.871999][T21995] input: syz0 as /devices/virtual/input/input211 [ 1030.351424][T22050] kvm: kvm [22049]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 1030.692904][T22068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.754260][T22068] kvm: user requested TSC rate below hardware speed [ 1031.001179][T22098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.020485][T22154] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1032.031868][T22153] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 1032.150118][T22165] vivid-001: ================= START STATUS ================= [ 1032.226983][T22165] vivid-001: Radio HW Seek Mode: Bounded [ 1032.248914][T22165] vivid-001: Radio Programmable HW Seek: false [ 1032.271690][T22165] vivid-001: RDS Rx I/O Mode: Block I/O [ 1032.287562][T22165] vivid-001: Generate RBDS Instead of RDS: false [ 1032.306441][T22165] vivid-001: RDS Reception: true [ 1032.335067][T22165] vivid-001: RDS Program Type: 0 inactive [ 1032.359252][T22165] vivid-001: RDS PS Name: inactive [ 1032.364549][T22165] vivid-001: RDS Radio Text: inactive [ 1032.373351][T22165] vivid-001: RDS Traffic Announcement: false inactive [ 1032.399464][T22165] vivid-001: RDS Traffic Program: false inactive [ 1032.421994][T22165] vivid-001: RDS Music: false inactive [ 1032.427624][T22165] vivid-001: ================== END STATUS ================== [ 1035.038418][T22313] can0: slcan on ptm0. [ 1035.438479][T22309] can0 (unregistered): slcan off ptm0. [ 1036.691572][T22397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.575605][T22439] input: syz1 as /devices/virtual/input/input213 [ 1038.452354][T22509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.737130][T22529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.608668][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1039.615612][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 1039.706023][T22572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.360810][T22652] random: crng reseeded on system resumption [ 1042.603913][T22719] usb usb8: usbfs: process 22719 (syz.2.6996) did not claim interface 0 before use [ 1043.642263][T22782] binder: 22769:22782 ioctl c0306201 200000000300 returned -22 [ 1044.200838][T22810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.401993][T22817] binder: 22814:22817 ioctl c0306201 200000000540 returned -14 [ 1044.466001][T22817] input: syz0 as /devices/virtual/input/input215 [ 1044.743265][T22830] vivid-000: disconnect [ 1044.801825][T22831] [U] ^C [ 1045.617197][ T3544] Bluetooth: hci4: Frame reassembly failed (-84) [ 1045.798923][T22823] vivid-000: reconnect [ 1045.806059][T22869] kvm: user requested TSC rate below hardware speed [ 1045.818148][T22869] CUSE: info not properly terminated [ 1046.169637][T22886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1046.817691][T22932] snd_dummy snd_dummy.0: control 1:254:0:syz0:32 is already present [ 1046.978503][T22938] usb usb1: usbfs: process 22938 (syz.2.7042) did not claim interface 0 before use [ 1047.688217][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1047.843816][T22996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1047.868705][T22997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1047.907945][T22996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1048.072112][T23026] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1048.975358][T23084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.490082][T23102] input: syz1 as /devices/virtual/input/input216 [ 1049.857293][ T30] audit: type=1400 audit(1750393544.465:38): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="c" pid=23110 comm="syz.8.7072" [ 1050.096638][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.106470][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.114940][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.123902][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.132091][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.165030][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.174360][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.188937][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.208469][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.216659][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.906993][ T1331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.255543][ T1331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.579252][T23202] vivid-004: disconnect [ 1051.584496][T23200] vivid-004: reconnect [ 1051.652665][ T1331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.748778][T23206] mkiss: ax0: crc mode is auto. [ 1051.960321][ T1331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.251940][ T5838] Bluetooth: hci2: command tx timeout [ 1052.433401][T23120] chnl_net:caif_netlink_parms(): no params data found [ 1052.543565][T23354] block device autoloading is deprecated and will be removed. [ 1052.590545][T23210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1052.604121][T23210] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1053.109648][ T1331] bridge_slave_1: left allmulticast mode [ 1053.121055][ T1331] bridge_slave_1: left promiscuous mode [ 1053.134880][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.226289][ T1331] bridge_slave_0: left allmulticast mode [ 1053.263875][ T1331] bridge_slave_0: left promiscuous mode [ 1053.271092][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.386446][T23459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1053.909288][T23480] input: syz1 as /devices/virtual/input/input219 [ 1054.418536][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.424903][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.949078][T23496] kvm: kvm [23495]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 1055.322720][T23513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1055.333642][T23513] syz.8.7114: attempt to access beyond end of device [ 1055.333642][T23513] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1055.550007][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.625911][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.690754][ T1331] bond0 (unregistering): Released all slaves [ 1055.745202][T23120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.765198][T23120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.779213][T23120] bridge_slave_0: entered allmulticast mode [ 1055.807719][T23120] bridge_slave_0: entered promiscuous mode [ 1055.981440][T23120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.000099][T23120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.008014][T23120] bridge_slave_1: entered allmulticast mode [ 1056.024510][T23120] bridge_slave_1: entered promiscuous mode [ 1056.474834][T23120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.499700][T23120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.033593][T23120] team0: Port device team_slave_0 added [ 1057.630379][T23120] team0: Port device team_slave_1 added [ 1057.872947][T23658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.931719][T23120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.953164][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.016172][T23120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.288827][ T1331] hsr_slave_0: left promiscuous mode [ 1058.374629][ T1331] hsr_slave_1: left promiscuous mode [ 1058.394824][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.513928][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.559170][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.600355][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.702896][ T1331] veth1_macvtap: left promiscuous mode [ 1058.733020][ T1331] veth0_macvtap: left promiscuous mode [ 1058.753624][ T1331] veth1_vlan: left promiscuous mode [ 1058.776834][ T1331] veth0_vlan: left promiscuous mode [ 1061.319949][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 1061.629575][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 1063.951353][T23120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.958573][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.984561][T23120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.385696][T23120] hsr_slave_0: entered promiscuous mode [ 1064.407811][T23120] hsr_slave_1: entered promiscuous mode [ 1064.439323][T23120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.447247][T23120] Cannot create hsr debugfs directory [ 1067.197025][T23965] input: syz1 as /devices/virtual/input/input222 [ 1068.112036][T23997] syz.8.7159 (23997): drop_caches: 0 [ 1068.120882][T23999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1068.140813][T24004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1068.572674][T23120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1068.622809][T23120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1068.681161][T23120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1068.718463][T23120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1068.778384][T24037] syz.0.7163: attempt to access beyond end of device [ 1068.778384][T24037] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1069.137444][T23120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.203148][T23120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.257732][T26800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.265034][T26800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.302331][T26800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.309596][T26800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.417395][T23120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.999162][T23120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.916604][T24115] mkiss: ax0: crc mode is auto. [ 1071.023023][T23120] veth0_vlan: entered promiscuous mode [ 1071.090756][T23120] veth1_vlan: entered promiscuous mode [ 1071.199650][T23120] veth0_macvtap: entered promiscuous mode [ 1071.224037][T23120] veth1_macvtap: entered promiscuous mode [ 1071.505745][T23120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.556445][T23120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.602661][T23120] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.631044][T23120] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.652550][T23120] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.674545][T23120] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.095243][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.114268][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.198033][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.245933][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.610239][T24182] Falling back ldisc for ttynull. [ 1073.457470][T24242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.972799][T24273] syz.8.7187: attempt to access beyond end of device [ 1073.972799][T24273] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1076.169698][T24331] input: syz0 as /devices/virtual/input/input223 [ 1077.459130][T24389] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1079.186348][T24436] mkiss: ax0: crc mode is auto. [ 1079.753295][T24468] dlm: non-version read from control device 2 [ 1081.052992][T24514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.063591][T24513] i2c i2c-0: Invalid block write size 33 [ 1081.271235][T24526] random: crng reseeded on system resumption [ 1081.394320][T24536] syz.7.7233 (24536): drop_caches: 0 [ 1081.595148][T24544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.611905][T24545] binder: 24543:24545 ioctl c018620c 200000000500 returned -1 [ 1081.657696][T24545] input: syz1 as /devices/virtual/input/input224 [ 1082.303466][T24574] loop6: detected capacity change from 0 to 63 [ 1082.320036][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.339734][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.347712][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.384856][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.397159][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.416302][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.444883][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.464823][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.475129][T24574] ldm_validate_partition_table(): Disk read failed. [ 1082.484833][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.496682][T24574] Buffer I/O error on dev loop6, logical block 0, async page read [ 1082.510535][T24574] Dev loop6: unable to read RDB block 0 [ 1082.516770][T24574] loop6: unable to read partition table [ 1082.524817][T24574] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1082.848329][T24592] support for cryptoloop has been removed. Use dm-crypt instead. [ 1084.132921][T24650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.318191][T24657] kvm: kvm [24656]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 1084.527214][T24669] dlm: no locking on control device [ 1086.082709][T24724] input: syz1 as /devices/virtual/input/input225 [ 1086.354586][T24738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.998711][T24762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.125662][T24821] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1088.136597][T24821] pim6reg0: linktype set to 769 [ 1088.794997][T24845] input input226: cannot allocate more than FF_MAX_EFFECTS effects [ 1089.260104][T24881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.284215][T24879] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1089.542919][T24906] input: syz1 as /devices/virtual/input/input227 [ 1090.020948][T24942] program syz.8.7299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1090.069264][T24942] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1090.541171][ T1331] Bluetooth: hci4: Frame reassembly failed (-84) [ 1092.519395][T25039] CUSE: info not properly terminated [ 1092.568392][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 1092.575004][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1093.726086][T25123] random: crng reseeded on system resumption [ 1093.851232][T25129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.490882][T25158] binder: 25157:25158 ioctl c0306201 2000000003c0 returned -14 [ 1094.768025][T25165] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1094.991602][T25174] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1099.646108][T25325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.355859][T25351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.616079][T25465] autofs4:pid:25465:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1103.664244][T25465] autofs4:pid:25465:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 1103.711088][T25470] usb usb1: usbfs: process 25470 (syz.7.7393) did not claim interface 0 before use [ 1103.871400][T14262] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1104.021612][T25490] fido_id[25490]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1104.966325][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.991807][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1105.000506][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1105.030577][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1105.048554][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1105.062679][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1105.099513][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1105.118408][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1105.144526][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1105.161448][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1106.066547][T26800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.393285][T26800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.510303][T25553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1106.523031][T25553] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1106.770949][T26800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.892138][T25623] usb usb1: usbfs: process 25623 (syz.7.7407) did not claim interface 0 before use [ 1107.336813][T26800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.637052][T25512] chnl_net:caif_netlink_parms(): no params data found [ 1108.318285][T25512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.325600][T25512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.351714][T25512] bridge_slave_0: entered allmulticast mode [ 1108.363008][T25512] bridge_slave_0: entered promiscuous mode [ 1108.403165][T25512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.426496][T25512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.439916][T25512] bridge_slave_1: entered allmulticast mode [ 1108.447967][T25512] bridge_slave_1: entered promiscuous mode [ 1108.676483][T25512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.694429][T26800] bridge_slave_1: left allmulticast mode [ 1108.701763][T26800] bridge_slave_1: left promiscuous mode [ 1108.707714][T26800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.780027][T26800] bridge_slave_0: left allmulticast mode [ 1108.789596][T26800] bridge_slave_0: left promiscuous mode [ 1108.795459][T26800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.378233][ T5158] Bluetooth: hci3: command 0xfc11 tx timeout [ 1109.378650][ T5838] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1109.828619][ T59] Bluetooth: (null): Invalid header checksum [ 1109.835175][ T59] Bluetooth: (null): Invalid header checksum [ 1109.939920][ T1151] Bluetooth: (null): Invalid header checksum [ 1110.064415][ T59] Bluetooth: (null): Invalid header checksum [ 1110.162079][ T59] Bluetooth: (null): Invalid header checksum [ 1110.284499][ T59] Bluetooth: (null): Invalid header checksum [ 1110.380216][ T59] Bluetooth: (null): Invalid header checksum [ 1110.649385][ T1151] Bluetooth: (null): Invalid header checksum [ 1110.655761][ T1151] Bluetooth: (null): Invalid header checksum [ 1111.289727][T26800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.408913][T26800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.464238][T26800] bond0 (unregistering): Released all slaves [ 1111.552668][T25512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.974137][T25512] team0: Port device team_slave_0 added [ 1112.209709][T25512] team0: Port device team_slave_1 added [ 1112.303589][T25918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.631199][T25512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.647692][T25512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.762617][T25512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.096577][T25512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.127640][T25512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.153663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.210722][T25512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.619210][T26800] hsr_slave_0: left promiscuous mode [ 1113.659115][T26800] hsr_slave_1: left promiscuous mode [ 1113.676496][T26800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.698317][T26800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.737632][T25996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.776290][T26800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.824793][T26800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.992600][T26800] veth1_macvtap: left promiscuous mode [ 1114.030834][T26800] veth0_macvtap: left promiscuous mode [ 1114.048011][T26800] veth1_vlan: left promiscuous mode [ 1114.056496][T26800] veth0_vlan: left promiscuous mode [ 1115.037702][T26068] syz.0.7436: attempt to access beyond end of device [ 1115.037702][T26068] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1115.863373][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.870128][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.869132][T26800] team0 (unregistering): Port device team_slave_1 removed [ 1117.110301][T26800] team0 (unregistering): Port device team_slave_0 removed [ 1119.938548][T25512] hsr_slave_0: entered promiscuous mode [ 1119.945317][T25512] hsr_slave_1: entered promiscuous mode [ 1119.953247][T25512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1119.961052][T25512] Cannot create hsr debugfs directory [ 1120.764951][T26196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.416696][ T30] audit: type=1800 audit(1750393616.025:39): pid=26241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7446" name="dmabuf" dev="dmabuf" ino=115 res=0 errno=0 [ 1122.063732][T26302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.309107][T26382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.580698][T25512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1123.672063][T25512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1123.744098][T25512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.845323][T25512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1123.991428][T26481] i2c i2c-0: Invalid block write size 254 [ 1124.201158][T25512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.275223][T25512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.304672][T25698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.311932][T25698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.355341][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.362639][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.650077][T26505] Falling back ldisc for ttyS3. [ 1125.053024][T26525] CUSE: info not properly terminated [ 1125.112527][T25512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.263675][T25512] veth0_vlan: entered promiscuous mode [ 1125.308476][T25512] veth1_vlan: entered promiscuous mode [ 1125.407431][T25512] veth0_macvtap: entered promiscuous mode [ 1125.434134][T25512] veth1_macvtap: entered promiscuous mode [ 1125.493623][T25512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.510943][T25512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.531214][T25512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.582158][T25512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.638380][T25512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.647194][T25512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.020775][T26800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.060145][T26800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.157143][T25698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.190647][T25698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.589822][T26603] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1127.884987][T26668] can0: slcan on ptm0. [ 1128.168668][T26664] can0 (unregistered): slcan off ptm0. [ 1129.181160][T26716] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1129.828431][T26754] tap0: tun_chr_ioctl cmd 1074025680 [ 1129.989910][T26766] kvm: user requested TSC rate below hardware speed [ 1130.749455][T26786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1132.076523][T26838] random: crng reseeded on system resumption [ 1132.197018][ T30] audit: type=1800 audit(1750393626.805:40): pid=26838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7496" name="memory.events" dev="tmpfs" ino=49 res=0 errno=0 [ 1132.243781][ T30] audit: type=1804 audit(1750393626.805:41): pid=26838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7496" name="/newroot/6/memory.events" dev="tmpfs" ino=49 res=1 errno=0 [ 1132.264967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.925315][T26856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.227474][T26870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.012734][T26957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.958493][T26979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.921081][T27045] input: syz1 as /devices/virtual/input/input231 [ 1138.550429][T27069] input: syz1 as /devices/virtual/input/input232 [ 1141.331036][T27190] [U] ^C [ 1141.736666][T27204] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1145.055196][T27457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1147.957799][T27559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1149.616398][T27612] input: syz1 as /devices/virtual/input/input235 [ 1150.305474][T27631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.761010][T27681] [U]  [ 1151.781791][T27681] [U] K{‘ [ 1151.785071][T27681] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1151.807417][T27681] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1151.838576][T27681] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1151.840010][T27681] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1151.841678][T27681] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1151.842021][T27681] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1151.842362][T27681] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1151.843198][T27681] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 1151.846196][T27681] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 1151.846618][T27681] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1151.846690][T27681] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1151.847522][T27681] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1151.847799][T27681] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1151.854431][T27681] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1151.854591][T27681] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1151.854999][T27681] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1151.855030][T27681] [U] ¹ EC [ 1151.855414][T27681] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 1151.909874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1151.919548][T27681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.989706][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.056321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.108635][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.588000][T27680] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1152.796402][T27709] binder: 27703:27709 ioctl c018620c 200000000380 returned -22 [ 1154.144076][T27753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.526201][T27752] [U]  [ 1155.387552][T27792] syz.0.7631: attempt to access beyond end of device [ 1155.387552][T27792] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1155.455541][T27796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1155.456019][T27796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1156.967876][T27860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.809279][T27901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.941496][T27908] input: syz0 as /devices/virtual/input/input238 [ 1158.021832][T27908] dlm: no locking on control device [ 1158.482811][T27935] input: syz1 as /devices/virtual/input/input239 [ 1159.422143][T27982] warn_alloc: 1 callbacks suppressed [ 1159.422165][T27982] syz.2.7666: vmalloc error: size 3891200, failed to allocated page array size 7600, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1159.493822][T27982] CPU: 1 UID: 0 PID: 27982 Comm: syz.2.7666 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1159.493853][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1159.493868][T27982] Call Trace: [ 1159.493877][T27982] [ 1159.493886][T27982] dump_stack_lvl+0x189/0x250 [ 1159.493922][T27982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.493946][T27982] ? __pfx__printk+0x10/0x10 [ 1159.493971][T27982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1159.494001][T27982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1159.494032][T27982] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1159.494063][T27982] warn_alloc+0x214/0x310 [ 1159.494110][T27982] ? __pfx_warn_alloc+0x10/0x10 [ 1159.494168][T27982] ? __get_vm_area_node+0x28f/0x300 [ 1159.494197][T27982] ? vb2_vmalloc_alloc+0xef/0x340 [ 1159.494239][T27982] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1159.494300][T27982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1159.494335][T27982] ? __kasan_kmalloc+0x93/0xb0 [ 1159.494364][T27982] vmalloc_user_noprof+0xad/0xf0 [ 1159.494392][T27982] ? vb2_vmalloc_alloc+0xef/0x340 [ 1159.494414][T27982] vb2_vmalloc_alloc+0xef/0x340 [ 1159.494448][T27982] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1159.494471][T27982] __vb2_queue_alloc+0x9bf/0x15a0 [ 1159.494519][T27982] vb2_core_reqbufs+0xc31/0x1420 [ 1159.494558][T27982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1159.494582][T27982] ? __kasan_kmalloc+0x93/0xb0 [ 1159.494608][T27982] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1159.494629][T27982] ? __vb2_init_fileio+0x1e8/0xff0 [ 1159.494656][T27982] __vb2_init_fileio+0x318/0xff0 [ 1159.494699][T27982] __vb2_perform_fileio+0x284/0x1600 [ 1159.494732][T27982] ? __asan_memset+0x22/0x50 [ 1159.494749][T27982] ? end_current_label_crit_section+0x152/0x180 [ 1159.494776][T27982] vb2_fop_write+0x22f/0x340 [ 1159.494804][T27982] v4l2_write+0x199/0x2c0 [ 1159.494835][T27982] vfs_writev+0x4b6/0x960 [ 1159.494859][T27982] ? __pfx_v4l2_write+0x10/0x10 [ 1159.494883][T27982] ? __pfx_vfs_writev+0x10/0x10 [ 1159.494925][T27982] ? __fget_files+0x2a/0x420 [ 1159.494965][T27982] ? __fget_files+0x3a0/0x420 [ 1159.494993][T27982] ? __fget_files+0x2a/0x420 [ 1159.495031][T27982] __x64_sys_pwritev+0x197/0x2a0 [ 1159.495064][T27982] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1159.495091][T27982] ? rcu_is_watching+0x15/0xb0 [ 1159.495121][T27982] ? do_syscall_64+0xbe/0x3b0 [ 1159.495146][T27982] do_syscall_64+0xfa/0x3b0 [ 1159.495165][T27982] ? lockdep_hardirqs_on+0x9c/0x150 [ 1159.495195][T27982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.495215][T27982] ? clear_bhb_loop+0x60/0xb0 [ 1159.495245][T27982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.495264][T27982] RIP: 0033:0x7f242478e929 [ 1159.495284][T27982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.495306][T27982] RSP: 002b:00007f242559c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1159.495327][T27982] RAX: ffffffffffffffda RBX: 00007f24249b6080 RCX: 00007f242478e929 [ 1159.495342][T27982] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 1159.495355][T27982] RBP: 00007f2424810b39 R08: 0000000000000007 R09: 0000000000000000 [ 1159.495367][T27982] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1159.495378][T27982] R13: 0000000000000000 R14: 00007f24249b6080 R15: 00007ffcbeb04a98 [ 1159.495410][T27982] [ 1159.497712][T27982] Mem-Info: [ 1159.841285][T27982] active_anon:10175 inactive_anon:0 isolated_anon:0 [ 1159.841285][T27982] active_file:3131 inactive_file:42050 isolated_file:0 [ 1159.841285][T27982] unevictable:768 dirty:38 writeback:0 [ 1159.841285][T27982] slab_reclaimable:11837 slab_unreclaimable:99786 [ 1159.841285][T27982] mapped:24371 shmem:1932 pagetables:1721 [ 1159.841285][T27982] sec_pagetables:3 bounce:0 [ 1159.841285][T27982] kernel_misc_reclaimable:0 [ 1159.841285][T27982] free:1321063 free_pcp:15233 free_cma:0 [ 1159.886581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.906071][T27982] Node 0 active_anon:40700kB inactive_anon:0kB active_file:11716kB inactive_file:168084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97400kB dirty:92kB writeback:0kB shmem:6192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12492kB pagetables:6768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1159.939410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.947618][T27982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1159.979072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.003669][T27982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1160.032904][T27982] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1160.038851][T27982] Node 0 DMA32 free:1361820kB boost:4096kB min:38328kB low:46884kB high:55440kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40648kB inactive_anon:0kB active_file:6416kB inactive_file:166776kB unevictable:1536kB writepending:92kB present:3129332kB managed:2557540kB mlocked:0kB bounce:0kB free_pcp:58228kB local_pcp:31364kB free_cma:0kB [ 1160.071289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.092195][T27982] lowmem_reserve[]: 0 0 1 1 1 [ 1160.097090][T27982] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1160.126158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.140979][T27982] lowmem_reserve[]: 0 0 0 0 0 [ 1160.147017][T27982] Node 1 Normal free:3906972kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10148kB local_pcp:7812kB free_cma:0kB [ 1160.186143][T27982] lowmem_reserve[]: 0 0 0 0 0 [ 1160.193512][T27982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1160.207343][T27982] Node 0 DMA32: 1415*4kB (UME) 1815*8kB (UME) 589*16kB (UME) 529*32kB (UME) 450*64kB (UME) 257*128kB (UME) 132*256kB (UME) 38*512kB (UME) 5*1024kB (UE) 8*2048kB (UM) 289*4096kB (UM) = 1366724kB [ 1160.227909][T27982] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1160.241009][T27982] Node 1 Normal: 219*4kB (UM) 62*8kB (UME) 60*16kB (UME) 296*32kB (UME) 96*64kB (UME) 25*128kB (UME) 9*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (UM) = 3906972kB [ 1160.307623][T27982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.321030][T27982] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1160.333134][T27982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1160.365566][T27982] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1160.388504][T27982] 46230 total pagecache pages [ 1160.393355][T27982] 0 pages in swap cache [ 1160.397713][T27982] Free swap = 124996kB [ 1160.406511][T27982] Total swap = 124996kB [ 1160.415929][T27982] 2097051 pages RAM [ 1160.430377][T27982] 0 pages HighMem/MovableOnly [ 1160.435166][T27982] 425688 pages reserved [ 1160.441120][T27982] 0 pages cma reserved [ 1161.394083][T28041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.526965][T28081] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1163.628359][T28117] syz.2.7689: attempt to access beyond end of device [ 1163.628359][T28117] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1163.739708][T28119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.791628][T14464] hid-generic 0000:0000:0000.001A: item fetching failed at offset 0/1 [ 1163.801400][T14464] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 1164.317685][T28151] CUSE: DEVNAME unspecified [ 1166.463681][T28266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.613894][T28326] CUSE: info not properly terminated [ 1169.147905][T28352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.419231][T28372] kvm: kvm [28371]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 1170.316791][T28414] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1170.383740][T28425] syz.8.7742: attempt to access beyond end of device [ 1170.383740][T28425] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1173.575148][T28533] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1173.631145][T28532] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1173.669332][T28545] syz.8.7764: attempt to access beyond end of device [ 1173.669332][T28545] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1174.225852][ T8730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1174.234094][ T8730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1174.250060][ T8730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1174.271317][ T8730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1174.319355][ T8730] rtc rtc0: __rtc_set_alarm: err=-22 [ 1175.416921][T28618] blktrace: Concurrent blktraces are not allowed on sg0 [ 1175.444830][T28611] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1176.027590][T14464] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1176.116622][T28647] input: syz0 as /devices/virtual/input/input241 [ 1176.183160][T28650] fido_id[28650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1176.252849][T28659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.296409][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.304138][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.803888][T28740] mkiss: ax0: crc mode is auto. [ 1178.597626][T28767] binder: 28764:28767 ioctl 400c620e 2000000000c0 returned -22 [ 1178.624967][T28760] loop6: detected capacity change from 0 to 7 [ 1178.685129][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.694441][ C0] buffer_io_error: 11 callbacks suppressed [ 1178.694459][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.712885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.722195][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.730361][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.739628][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.749339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.758606][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.766867][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.776144][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.784363][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.793606][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.809947][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.819355][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.827438][T28760] ldm_validate_partition_table(): Disk read failed. [ 1178.836875][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.846134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.854474][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.863784][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.872448][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1178.881720][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.891164][T28760] Dev loop6: unable to read RDB block 0 [ 1178.901403][T28760] loop6: unable to read partition table [ 1178.907354][T28760] loop6: partition table beyond EOD, truncated [ 1178.918868][T28760] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 1179.287742][T28798] input: syz1 as /devices/virtual/input/input245 [ 1179.459898][ T30] audit: type=1400 audit(1750393674.075:42): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=28810 comm="syz.0.7806" [ 1179.491164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.065202][T28869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1181.181273][T28869] binder: 28866:28869 ioctl 400c620e 9999999999999999 returned -14 [ 1181.218422][T28884] vivid-000: ================= START STATUS ================= [ 1181.267903][T28884] vivid-000: Radio HW Seek Mode: Bounded [ 1181.289319][T28884] vivid-000: Radio Programmable HW Seek: false [ 1181.295598][T28884] vivid-000: RDS Rx I/O Mode: Block I/O [ 1181.305698][T28884] vivid-000: Generate RBDS Instead of RDS: false [ 1181.323186][T28884] vivid-000: RDS Reception: false [ 1181.330221][T28884] vivid-000: RDS Program Type: 0 inactive [ 1181.336224][T28884] vivid-000: RDS PS Name: inactive [ 1181.347676][T28884] vivid-000: RDS Radio Text: inactive [ 1181.364263][T28884] vivid-000: RDS Traffic Announcement: false inactive [ 1181.395642][T28884] vivid-000: RDS Traffic Program: false inactive [ 1181.422895][T28884] vivid-000: RDS Music: false inactive [ 1181.449850][T28884] vivid-000: ================== END STATUS ================== [ 1182.546028][T28935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.035701][T28966] sp0: Synchronizing with TNC [ 1183.664947][T28995] autofs4:pid:28995:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 1183.688677][T28995] autofs4:pid:28995:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1185.695541][T29093] QAT: failed to copy from user cfg_data. [ 1186.470680][T29128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1186.585325][T29137] sp0: Synchronizing with TNC [ 1188.303674][T29206] can0: slcan on ptm1. [ 1188.978333][T29203] can0 (unregistered): slcan off ptm1. [ 1189.576509][T29260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.849070][ T5838] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1192.643979][T29380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.836194][T29422] random: crng reseeded on system resumption [ 1194.133914][T29438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.157992][T29438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.991182][T29478] binfmt_misc: register: failed to install interpreter file ./cgroup [ 1195.077020][T29472] syz.8.7904 (29472): drop_caches: 0 [ 1195.092088][T29471] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1195.117452][T29472] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1195.347065][T29496] input: syz0 as /devices/virtual/input/input249 [ 1195.846289][T29515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.452154][T29539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.619788][T29632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.894221][T29685] input: syz0 as /devices/virtual/input/input250 [ 1200.198864][T29693] input: syz1 as /devices/virtual/input/input251 [ 1200.279987][T29693] can0: slcan on ptm0. [ 1200.698413][T29692] can0 (unregistered): slcan off ptm0. [ 1202.236674][T29828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.849131][T29914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1204.611681][T30011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.319236][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.344931][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.353416][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.361743][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.373239][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.395506][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1205.406972][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1205.415577][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1205.428302][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1205.445567][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.666399][T30070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.857199][T30089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.915042][T30100] Falling back ldisc for ttyS3. [ 1206.304449][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.691609][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.131336][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.441508][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.529841][ T5158] Bluetooth: hci3: command tx timeout [ 1207.697687][T30029] chnl_net:caif_netlink_parms(): no params data found [ 1207.945508][T30264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.381505][T30029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.399444][T30029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.419510][T30029] bridge_slave_0: entered allmulticast mode [ 1208.427436][T30029] bridge_slave_0: entered promiscuous mode [ 1208.457707][T30029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.483476][T30029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.518312][T30029] bridge_slave_1: entered allmulticast mode [ 1208.533328][T30029] bridge_slave_1: entered promiscuous mode [ 1208.982888][T30029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.016497][T30029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.411053][T30029] team0: Port device team_slave_0 added [ 1209.433780][T30029] team0: Port device team_slave_1 added [ 1209.549844][ T59] bridge_slave_1: left allmulticast mode [ 1209.556148][ T59] bridge_slave_1: left promiscuous mode [ 1209.562519][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.618295][ T5158] Bluetooth: hci3: command tx timeout [ 1209.649482][ T59] bridge_slave_0: left allmulticast mode [ 1209.655323][ T59] bridge_slave_0: left promiscuous mode [ 1209.661847][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.830368][T30369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1209.836775][T30369] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1211.569322][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.649093][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.690422][ T59] bond0 (unregistering): Released all slaves [ 1212.319471][T30506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.409880][T30029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.416928][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.444593][T30029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.457766][T30029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.464998][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.496845][T30029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.018104][T30029] hsr_slave_0: entered promiscuous mode [ 1213.037807][T30029] hsr_slave_1: entered promiscuous mode [ 1213.050967][T30029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1213.068086][T30029] Cannot create hsr debugfs directory [ 1213.911033][ T59] hsr_slave_0: left promiscuous mode [ 1213.944257][ T59] hsr_slave_1: left promiscuous mode [ 1213.954138][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.975931][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.050190][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.057676][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.160729][ T59] veth1_macvtap: left promiscuous mode [ 1214.166385][ T59] veth0_macvtap: left promiscuous mode [ 1214.188360][ T59] veth1_vlan: left promiscuous mode [ 1214.193774][ T59] veth0_vlan: left promiscuous mode [ 1214.797701][T30636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.393745][T30657] QAT: Invalid ioctl 21531 [ 1215.416566][T30657] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1215.421075][T26800] Bluetooth: hci1: Frame reassembly failed (-90) [ 1216.619550][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1216.868689][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1217.458485][ T5838] Bluetooth: hci1: command 0x1003 tx timeout [ 1217.458524][ T5158] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1219.665538][T30718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.195988][T30029] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1222.232509][T30029] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1222.274991][T30029] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1222.344461][T30029] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1222.775780][T30029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.837534][T30029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.877177][T25698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.884447][T25698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.962322][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.969615][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.123182][T30879] vivid-000: disconnect [ 1223.541949][T30878] vivid-000: reconnect [ 1223.623565][T30029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.430017][T30949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.531066][T30029] veth0_vlan: entered promiscuous mode [ 1224.567720][T30029] veth1_vlan: entered promiscuous mode [ 1224.703061][T30029] veth0_macvtap: entered promiscuous mode [ 1224.739889][T30029] veth1_macvtap: entered promiscuous mode [ 1224.778927][T30029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.783366][T30029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.786629][T30029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.786668][T30029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.786699][T30029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.786728][T30029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.224849][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.268363][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.413044][T25698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.438989][T25698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.034004][T31022] random: crng reseeded on system resumption [ 1226.180288][T31020] [U] / [ 1226.302599][T31039] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1230.766707][T31175] [U] ^C [ 1231.485788][T31221] usb usb1: usbfs: interface 0 claimed by usbfs while 'syz.7.8070' sets config #-3 [ 1231.732685][T31236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.880708][T31338] mkiss: ax0: crc mode is auto. [ 1236.126750][T31374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.146750][T31377] program syz.7.8097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.535355][T31394] syz.8.8100: attempt to access beyond end of device [ 1236.535355][T31394] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1236.676025][T31408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1237.802729][T31485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1237.847454][T31491] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1238.176156][T31520] dlm: no locking on control device [ 1238.183201][T31521] dlm: no locking on control device [ 1238.737817][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.747420][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.187825][T31562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1239.439092][T31572] dlm: no locking on control device [ 1239.664279][T31587] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1240.316565][T31606] random: crng reseeded on system resumption [ 1241.519011][T31638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.688581][T31687] binder: 31684:31687 ioctl c0306201 200000000300 returned -22 [ 1244.501203][T31732] binder: 31731:31732 ioctl c00c620f 0 returned -14 [ 1248.431457][ T12] Bluetooth: hci1: Frame reassembly failed (-90) [ 1250.488201][ T5158] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1250.889803][T31946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1250.928249][T31954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1251.131170][T31961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.225402][ T30] audit: type=1800 audit(1750393753.835:43): pid=32198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8236" name="dmabuf" dev="dmabuf" ino=124 res=0 errno=0 [ 1260.583914][T32246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.502690][T32332] CUSE: info not properly terminated [ 1264.960997][T32354] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1265.103678][T32360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.332354][ T5158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1265.348553][ T5158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1265.359014][ T5158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1265.379484][ T5158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1265.389989][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1265.411767][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1265.421887][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1265.429797][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1265.439406][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1265.447250][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1266.195983][ T1151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.501912][ T1151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.636316][T32458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.820021][ T1151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.063687][ T1151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.365999][T32375] chnl_net:caif_netlink_parms(): no params data found [ 1267.391044][T32564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.528461][ T5838] Bluetooth: hci0: command tx timeout [ 1268.130659][T32663] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1268.156546][ T1151] bridge_slave_1: left allmulticast mode [ 1268.165438][ T1151] bridge_slave_1: left promiscuous mode [ 1268.172776][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.203817][T32665] syz.7.8286 (32665): drop_caches: 0 [ 1268.270094][ T1151] bridge_slave_0: left allmulticast mode [ 1268.283741][ T1151] bridge_slave_0: left promiscuous mode [ 1268.302305][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.609484][ T5838] Bluetooth: hci0: command tx timeout [ 1269.963035][T32706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.386950][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.422259][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.442860][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.455979][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.466581][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.486351][T32735] Falling back ldisc for ttyprintk. [ 1270.498241][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.505775][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.536886][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.544860][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.572591][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.592810][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.609028][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.617002][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.624874][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.633097][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651521][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651556][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651583][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651609][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651636][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651662][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651688][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651713][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651739][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651765][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651791][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651817][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651843][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651870][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651895][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651921][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651947][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651972][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.651998][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652024][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652050][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652076][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652101][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652126][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652151][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652175][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652208][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652232][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652256][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652279][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652303][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652326][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652351][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652377][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652403][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652428][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652455][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652481][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652507][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652533][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652557][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652583][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652609][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652633][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652657][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652683][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652707][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652731][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652775][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652800][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652824][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652848][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652872][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652896][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652921][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652947][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652973][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.652998][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.653024][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.653049][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657807][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657845][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657872][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657899][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657923][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.657950][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666150][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666182][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666216][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666243][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666269][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666295][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666320][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666346][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666372][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666399][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666425][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666451][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666477][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666503][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666529][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666555][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666581][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666606][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666632][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666658][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666684][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666709][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666735][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666761][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666786][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666812][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666838][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666864][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666890][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666915][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666941][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666967][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.666993][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667019][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667045][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667071][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667097][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667123][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667149][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667174][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667227][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667251][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667275][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667299][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667322][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667344][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667367][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667393][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667418][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667442][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667465][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667489][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667514][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667538][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667563][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667587][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667611][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667635][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667659][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667683][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667707][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667731][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667756][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667780][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667804][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667828][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667852][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667876][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667900][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667924][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.667949][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.672938][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.672972][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.672999][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673026][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673052][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673080][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673107][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673133][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673159][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673186][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673222][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673248][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.673276][ T5913] hid-generic 0008:0001:0007.001C: unknown main item tag 0x0 [ 1270.685703][ T5913] hid-generic 0008:0001:0007.001C: hidraw0: HID va.24 Device [syz0] on syz0 [ 1270.891314][T32759] fido_id[32759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1271.390230][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.520032][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.650887][ T1151] bond0 (unregistering): Released all slaves [ 1271.698045][ T5838] Bluetooth: hci0: command tx timeout [ 1271.976783][T32375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.976906][T32375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.977118][T32375] bridge_slave_0: entered allmulticast mode [ 1271.989789][ T331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.989812][T32375] bridge_slave_0: entered promiscuous mode [ 1272.018618][T32375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.018738][T32375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.018951][T32375] bridge_slave_1: entered allmulticast mode [ 1272.020858][T32375] bridge_slave_1: entered promiscuous mode [ 1272.295069][T32375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.513802][T32375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.515285][ T307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1272.515328][ T307] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1273.232582][T32375] team0: Port device team_slave_0 added [ 1273.235780][T32375] team0: Port device team_slave_1 added [ 1274.029122][T32375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.029143][T32375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.029180][T32375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.031183][T32375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.031199][T32375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.031232][T32375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.719767][ T504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.799953][ T1151] hsr_slave_0: left promiscuous mode [ 1274.870953][ T1151] hsr_slave_1: left promiscuous mode [ 1274.889698][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.917492][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.024480][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.046742][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.164980][ T1151] veth1_macvtap: left promiscuous mode [ 1275.195576][ T1151] veth0_macvtap: left promiscuous mode [ 1275.201738][ T1151] veth1_vlan: left promiscuous mode [ 1275.207272][ T1151] veth0_vlan: left promiscuous mode [ 1278.253386][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 1278.474989][ T558] input: syz1 as /devices/virtual/input/input259 [ 1278.579075][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 1278.693819][ T569] cgroup: fork rejected by pids controller in /syz7 [ 1281.142177][T32375] hsr_slave_0: entered promiscuous mode [ 1281.151728][T32375] hsr_slave_1: entered promiscuous mode [ 1282.461756][ T778] binder: 774:778 ioctl 400c620e 9999999999999999 returned -14 [ 1282.469568][ T776] binder: 774:776 ioctl 400c620e 9999999999999999 returned -14 [ 1282.716848][T32375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1282.804168][T32375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1282.959394][T32375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1283.064857][T32375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1283.093919][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1283.104837][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1283.113899][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1283.122723][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1283.131498][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1283.176952][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1283.201476][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1283.210172][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1283.219339][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1283.227123][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1283.349950][ T833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.937357][ T1151] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.548753][ T1151] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.695232][ T863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1284.711560][ T863] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1284.858102][ T1151] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.152623][ T1151] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.524169][T32375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.544954][ T811] chnl_net:caif_netlink_parms(): no params data found [ 1286.326208][T32375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.357037][ T1151] bridge_slave_1: left allmulticast mode [ 1286.375553][ T1151] bridge_slave_1: left promiscuous mode [ 1286.399051][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.489864][ T1151] bridge_slave_0: left allmulticast mode [ 1286.509234][ T1151] bridge_slave_0: left promiscuous mode [ 1286.523487][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.001838][ T1142] binder: 1141:1142 ioctl 40046210 ffffffffffffffff returned -14 [ 1287.110260][ T1149] program syz.2.8336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1287.211003][ T1156] input: syz1 as /devices/virtual/input/input260 [ 1287.217468][ T1156] input: failed to attach handler leds to device input260, error: -6 [ 1287.263774][ T1160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.935016][ T1138] Falling back ldisc for ttynull. [ 1288.440380][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.540107][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.593773][ T1151] bond0 (unregistering): Released all slaves [ 1288.644670][ T811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.655393][ T811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.663135][ T811] bridge_slave_0: entered allmulticast mode [ 1288.675292][ T811] bridge_slave_0: entered promiscuous mode [ 1288.684415][ T811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.692002][ T811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.699467][ T811] bridge_slave_1: entered allmulticast mode [ 1288.706858][ T811] bridge_slave_1: entered promiscuous mode [ 1288.986597][ T1218] misc userio: No port type given on /dev/userio [ 1288.996192][ T1218] misc userio: The device must be registered before sending interrupts [ 1289.321781][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.329012][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.407690][ T811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.451481][ T811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.571858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.579130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.226294][ T811] team0: Port device team_slave_0 added [ 1290.273404][ T811] team0: Port device team_slave_1 added [ 1290.531644][ T811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.553611][ T811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.628055][ T811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.703329][ T811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.738006][ T811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.763960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.830770][ T811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.214904][ T811] hsr_slave_0: entered promiscuous mode [ 1291.222643][ T811] hsr_slave_1: entered promiscuous mode [ 1291.232822][ T811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.243738][ T811] Cannot create hsr debugfs directory [ 1291.546862][T32375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.380815][ T1594] usb usb8: usbfs: process 1594 (syz.2.8347) did not claim interface 0 before use [ 1292.393046][T32375] veth0_vlan: entered promiscuous mode [ 1292.434058][T32375] veth1_vlan: entered promiscuous mode [ 1292.537727][T32375] veth0_macvtap: entered promiscuous mode [ 1292.592041][T32375] veth1_macvtap: entered promiscuous mode [ 1292.756963][T32375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.873589][T32375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.956043][T32375] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.977534][T32375] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.992024][T32375] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.013401][T32375] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.054396][ T811] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1293.167072][ T811] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1293.316586][ T811] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1293.376436][ T811] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1293.808436][ T811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.833007][ T811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.847880][T25698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.855159][T25698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.875246][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.882476][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.319802][ T811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.922600][ T811] veth0_vlan: entered promiscuous mode [ 1294.942999][ T811] veth1_vlan: entered promiscuous mode [ 1295.002595][ T811] veth0_macvtap: entered promiscuous mode [ 1295.019339][ T811] veth1_macvtap: entered promiscuous mode [ 1295.060351][ T811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.078187][ T811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.097878][ T811] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.107498][ T811] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.117093][ T811] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.126164][ T811] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.176044][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.182429][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.616172][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.623498][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.055108][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.061671][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1452.488201][ T31] INFO: task kworker/u8:6:1151 blocked for more than 143 seconds. [ 1452.496082][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1452.504025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1452.516324][ T31] task:kworker/u8:6 state:D stack:21048 pid:1151 tgid:1151 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1452.528502][ T31] Workqueue: netns cleanup_net [ 1452.533331][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1452.536641][ T31] [ 1452.541319][ T31] __schedule+0x16f5/0x4d00 [ 1452.550478][ T31] ? __lock_acquire+0xab9/0xd20 [ 1452.555417][ T31] ? schedule+0x165/0x360 [ 1452.562049][ T31] ? __pfx___schedule+0x10/0x10 [ 1452.566999][ T31] ? schedule+0x91/0x360 [ 1452.573451][ T31] schedule+0x165/0x360 [ 1452.581195][ T31] schedule_preempt_disabled+0x13/0x30 [ 1452.586731][ T31] __mutex_lock+0x724/0xe80 [ 1452.626729][ T31] ? kobject_put+0x43f/0x480 [ 1452.642766][ T31] ? __mutex_lock+0x51b/0xe80 [ 1452.647554][ T31] ? rfkill_unregister+0xc8/0x220 [ 1452.654322][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1452.659511][ T31] ? __pfx_device_del+0x10/0x10 [ 1452.664404][ T31] rfkill_unregister+0xc8/0x220 [ 1452.669487][ T31] wiphy_unregister+0x238/0xae0 [ 1452.674421][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1452.680465][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 1452.685869][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1452.691279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.696557][ T31] ? kfree+0x18e/0x440 [ 1452.700724][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1452.706226][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 1452.711945][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1452.718104][ T31] hwsim_exit_net+0x584/0x640 [ 1452.722793][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1452.728751][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1452.734637][ T31] ops_undo_list+0x49a/0x990 [ 1452.739542][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1452.744724][ T31] cleanup_net+0x4c5/0x800 [ 1452.749318][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1452.754310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1452.759638][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1452.765386][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1452.771235][ T31] process_scheduled_works+0xae1/0x17b0 [ 1452.776839][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1452.783003][ T31] worker_thread+0x8a0/0xda0 [ 1452.787651][ T31] kthread+0x70e/0x8a0 [ 1452.791884][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1452.797030][ T31] ? __pfx_kthread+0x10/0x10 [ 1452.801741][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1452.807009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.812490][ T31] ? __pfx_kthread+0x10/0x10 [ 1452.817132][ T31] ret_from_fork+0x3f9/0x770 [ 1452.821907][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1452.827049][ T31] ? __switch_to_asm+0x39/0x70 [ 1452.831981][ T31] ? __switch_to_asm+0x33/0x70 [ 1452.836777][ T31] ? __pfx_kthread+0x10/0x10 [ 1452.841513][ T31] ret_from_fork_asm+0x1a/0x30 [ 1452.846323][ T31] [ 1452.849591][ T31] INFO: task kworker/1:5:5913 blocked for more than 143 seconds. [ 1452.857333][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1452.865089][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1452.883376][ T31] task:kworker/1:5 state:D stack:23080 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1452.895767][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1452.902604][ T31] Call Trace: [ 1452.905911][ T31] [ 1452.908914][ T31] __schedule+0x16f5/0x4d00 [ 1452.913491][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1452.918954][ T31] ? schedule+0x165/0x360 [ 1452.923302][ T31] ? __pfx___schedule+0x10/0x10 [ 1452.928255][ T31] ? schedule+0x91/0x360 [ 1452.932551][ T31] schedule+0x165/0x360 [ 1452.936749][ T31] schedule_preempt_disabled+0x13/0x30 [ 1452.942326][ T31] __mutex_lock+0x724/0xe80 [ 1452.946861][ T31] ? look_up_lock_class+0x74/0x170 [ 1452.952047][ T31] ? __mutex_lock+0x51b/0xe80 [ 1452.956759][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1452.963095][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1452.968228][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1452.973977][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1452.979815][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1452.985914][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1452.991705][ T31] process_scheduled_works+0xae1/0x17b0 [ 1452.997304][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1453.003436][ T31] worker_thread+0x8a0/0xda0 [ 1453.008153][ T31] kthread+0x70e/0x8a0 [ 1453.012274][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1453.017412][ T31] ? __pfx_kthread+0x10/0x10 [ 1453.022116][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1453.027349][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.032693][ T31] ? __pfx_kthread+0x10/0x10 [ 1453.037324][ T31] ret_from_fork+0x3f9/0x770 [ 1453.042046][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1453.047189][ T31] ? __switch_to_asm+0x39/0x70 [ 1453.052159][ T31] ? __switch_to_asm+0x33/0x70 [ 1453.056963][ T31] ? __pfx_kthread+0x10/0x10 [ 1453.061693][ T31] ret_from_fork_asm+0x1a/0x30 [ 1453.066515][ T31] [ 1453.069696][ T31] INFO: task syz-executor:32375 blocked for more than 143 seconds. [ 1453.077615][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1453.085377][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1453.094114][ T31] task:syz-executor state:D stack:21464 pid:32375 tgid:32375 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1453.106118][ T31] Call Trace: [ 1453.109499][ T31] [ 1453.112464][ T31] __schedule+0x16f5/0x4d00 [ 1453.117028][ T31] ? __lock_acquire+0xab9/0xd20 [ 1453.121998][ T31] ? schedule+0x165/0x360 [ 1453.126401][ T31] ? __pfx___schedule+0x10/0x10 [ 1453.131557][ T31] ? schedule+0x91/0x360 [ 1453.135845][ T31] schedule+0x165/0x360 [ 1453.140097][ T31] schedule_preempt_disabled+0x13/0x30 [ 1453.145589][ T31] __mutex_lock+0x724/0xe80 [ 1453.150146][ T31] ? __mutex_lock+0x51b/0xe80 [ 1453.154848][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1453.159879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1453.164945][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1453.170347][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1453.175759][ T31] rfkill_fop_open+0x12d/0x820 [ 1453.180618][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1453.185930][ T31] misc_open+0x2bc/0x330 [ 1453.190339][ T31] chrdev_open+0x4cc/0x5e0 [ 1453.194804][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1453.200936][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1453.205945][ T31] do_dentry_open+0xdf3/0x1970 [ 1453.210832][ T31] vfs_open+0x3b/0x340 [ 1453.214936][ T31] ? path_openat+0x2ecd/0x3830 [ 1453.219843][ T31] path_openat+0x2ee5/0x3830 [ 1453.224488][ T31] ? arch_stack_walk+0xfc/0x150 [ 1453.229441][ T31] ? do_syscall_64+0xfa/0x3b0 [ 1453.234170][ T31] ? __pfx_path_openat+0x10/0x10 [ 1453.239229][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.245341][ T31] do_filp_open+0x1fa/0x410 [ 1453.249930][ T31] ? __lock_acquire+0xab9/0xd20 [ 1453.254815][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1453.259952][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1453.264840][ T31] ? alloc_fd+0x64c/0x6c0 [ 1453.269318][ T31] do_sys_openat2+0x121/0x1c0 [ 1453.274027][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1453.279345][ T31] ? fput_close_sync+0x119/0x200 [ 1453.284311][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1453.289720][ T31] __x64_sys_openat+0x138/0x170 [ 1453.294602][ T31] do_syscall_64+0xfa/0x3b0 [ 1453.299215][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.305312][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1453.311603][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1453.316316][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.322322][ T31] RIP: 0033:0x7fd6d4f8d290 [ 1453.326773][ T31] RSP: 002b:00007ffddcbdd310 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1453.335319][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd6d4f8d290 [ 1453.343409][ T31] RDX: 0000000000000002 RSI: 00007fd6d50115b1 RDI: 00000000ffffff9c [ 1453.351496][ T31] RBP: 00007fd6d50115b1 R08: 0000000000000000 R09: 0000000000000000 [ 1453.359583][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1453.367583][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1453.376004][ T31] [ 1453.379160][ T31] INFO: task syz-executor:811 blocked for more than 144 seconds. [ 1453.386905][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1453.394707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1453.403447][ T31] task:syz-executor state:D stack:21464 pid:811 tgid:811 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1453.415443][ T31] Call Trace: [ 1453.418790][ T31] [ 1453.421731][ T31] __schedule+0x16f5/0x4d00 [ 1453.426262][ T31] ? __kasan_slab_free+0x62/0x70 [ 1453.431292][ T31] ? security_file_open+0xb1/0x270 [ 1453.436451][ T31] ? do_dentry_open+0x35e/0x1970 [ 1453.441507][ T31] ? __lock_acquire+0xab9/0xd20 [ 1453.446390][ T31] ? schedule+0x165/0x360 [ 1453.450834][ T31] ? __pfx___schedule+0x10/0x10 [ 1453.455770][ T31] ? schedule+0x91/0x360 [ 1453.460129][ T31] schedule+0x165/0x360 [ 1453.464339][ T31] schedule_preempt_disabled+0x13/0x30 [ 1453.469919][ T31] __mutex_lock+0x724/0xe80 [ 1453.474469][ T31] ? __mutex_lock+0x51b/0xe80 [ 1453.479279][ T31] ? misc_open+0x51/0x330 [ 1453.483673][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1453.488837][ T31] misc_open+0x51/0x330 [ 1453.493042][ T31] chrdev_open+0x4cc/0x5e0 [ 1453.497482][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1453.502551][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1453.507537][ T31] do_dentry_open+0xdf3/0x1970 [ 1453.512400][ T31] vfs_open+0x3b/0x340 [ 1453.516500][ T31] ? path_openat+0x2ecd/0x3830 [ 1453.521375][ T31] path_openat+0x2ee5/0x3830 [ 1453.525998][ T31] ? arch_stack_walk+0xfc/0x150 [ 1453.530956][ T31] ? do_syscall_64+0xfa/0x3b0 [ 1453.535674][ T31] ? __pfx_path_openat+0x10/0x10 [ 1453.540703][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.546812][ T31] do_filp_open+0x1fa/0x410 [ 1453.551414][ T31] ? __lock_acquire+0xab9/0xd20 [ 1453.556296][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1453.561439][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1453.566329][ T31] ? alloc_fd+0x64c/0x6c0 [ 1453.570750][ T31] do_sys_openat2+0x121/0x1c0 [ 1453.575474][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1453.580754][ T31] ? fput_close_sync+0x119/0x200 [ 1453.585724][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1453.591113][ T31] __x64_sys_openat+0x138/0x170 [ 1453.595996][ T31] do_syscall_64+0xfa/0x3b0 [ 1453.600594][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.605846][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.612141][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1453.616853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.623215][ T31] RIP: 0033:0x7fed0df8d290 [ 1453.627710][ T31] RSP: 002b:00007ffe00f86560 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1453.640316][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fed0df8d290 [ 1453.648789][ T31] RDX: 0000000000000002 RSI: 00007fed0e0115b1 RDI: 00000000ffffff9c [ 1453.656813][ T31] RBP: 00007fed0e0115b1 R08: 0000000000000000 R09: 0000000000000000 [ 1453.664936][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1453.672996][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1453.681067][ T31] [ 1453.684133][ T31] INFO: task syz.8.8341:1231 blocked for more than 144 seconds. [ 1453.691924][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1453.699694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1453.708431][ T31] task:syz.8.8341 state:D stack:25128 pid:1231 tgid:1231 ppid:30029 task_flags:0x400040 flags:0x00004004 [ 1453.720492][ T31] Call Trace: [ 1453.723807][ T31] [ 1453.726759][ T31] __schedule+0x16f5/0x4d00 [ 1453.731367][ T31] ? __lock_acquire+0xab9/0xd20 [ 1453.736258][ T31] ? schedule+0x165/0x360 [ 1453.740983][ T31] ? __pfx___schedule+0x10/0x10 [ 1453.745892][ T31] ? schedule+0x91/0x360 [ 1453.750211][ T31] schedule+0x165/0x360 [ 1453.754412][ T31] schedule_preempt_disabled+0x13/0x30 [ 1453.759988][ T31] __mutex_lock+0x724/0xe80 [ 1453.764511][ T31] ? kobject_put+0x43f/0x480 [ 1453.770263][ T31] ? __mutex_lock+0x51b/0xe80 [ 1453.775301][ T31] ? rfkill_unregister+0xc8/0x220 [ 1453.780451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1453.785503][ T31] ? __pfx_device_del+0x10/0x10 [ 1453.790439][ T31] rfkill_unregister+0xc8/0x220 [ 1453.795314][ T31] nfc_unregister_device+0x96/0x2a0 [ 1453.800594][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1453.806341][ T31] virtual_ncidev_close+0x56/0x90 [ 1453.811466][ T31] __fput+0x44c/0xa70 [ 1453.815483][ T31] task_work_run+0x1d1/0x260 [ 1453.820202][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1453.825441][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1453.831015][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1453.836334][ T31] do_syscall_64+0x2bd/0x3b0 [ 1453.841082][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.847241][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1453.853552][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1453.858358][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.864292][ T31] RIP: 0033:0x7fbb19d8e929 [ 1453.868828][ T31] RSP: 002b:00007ffee03625c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1453.877289][ T31] RAX: 0000000000000000 RBX: 00007fbb19fb7ba0 RCX: 00007fbb19d8e929 [ 1453.885439][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1453.893509][ T31] RBP: 00007fbb19fb7ba0 R08: 0000000000000210 R09: 0000001ee03628bf [ 1453.901598][ T31] R10: 00007fbb19fb7ac0 R11: 0000000000000246 R12: 000000000013af4e [ 1453.909634][ T31] R13: 00007fbb19fb6160 R14: ffffffffffffffff R15: 00007ffee03626e0 [ 1453.917632][ T31] [ 1453.920789][ T31] INFO: task syz.8.8341:1232 blocked for more than 144 seconds. [ 1453.930374][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1453.938131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1453.946929][ T31] task:syz.8.8341 state:D stack:24744 pid:1232 tgid:1231 ppid:30029 task_flags:0x400140 flags:0x00004006 [ 1453.959069][ T31] Call Trace: [ 1453.962377][ T31] [ 1453.965316][ T31] __schedule+0x16f5/0x4d00 [ 1453.969935][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1453.976051][ T31] ? schedule+0x165/0x360 [ 1453.980501][ T31] ? __pfx___schedule+0x10/0x10 [ 1453.985415][ T31] ? schedule+0x91/0x360 [ 1453.989814][ T31] schedule+0x165/0x360 [ 1453.994034][ T31] schedule_preempt_disabled+0x13/0x30 [ 1453.999617][ T31] __mutex_lock+0x724/0xe80 [ 1454.004147][ T31] ? __lock_acquire+0xab9/0xd20 [ 1454.009072][ T31] ? __mutex_lock+0x51b/0xe80 [ 1454.013783][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1454.019520][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1454.024636][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1454.029922][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1454.035851][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1454.042279][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1454.048090][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1454.053247][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1454.059095][ T31] rfkill_set_block+0x1cf/0x440 [ 1454.064000][ T31] rfkill_fop_write+0x44b/0x570 [ 1454.068962][ T31] ? common_file_perm+0x199/0x200 [ 1454.074018][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1454.079509][ T31] ? security_kernfs_init_security+0x250/0x290 [ 1454.085700][ T31] ? rw_verify_area+0x258/0x650 [ 1454.090711][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1454.096156][ T31] vfs_write+0x27b/0xa90 [ 1454.100522][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1454.105325][ T31] ? __fget_files+0x2a/0x420 [ 1454.110034][ T31] ? __fget_files+0x2a/0x420 [ 1454.114659][ T31] ? __fget_files+0x3a0/0x420 [ 1454.119454][ T31] ? __fget_files+0x2a/0x420 [ 1454.124100][ T31] ksys_write+0x145/0x250 [ 1454.128549][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1454.133444][ T31] ? rcu_is_watching+0x15/0xb0 [ 1454.138317][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1454.143023][ T31] do_syscall_64+0xfa/0x3b0 [ 1454.147536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1454.152827][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.159016][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1454.163734][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.169924][ T31] RIP: 0033:0x7fbb19d8e929 [ 1454.174380][ T31] RSP: 002b:00007fbb1aca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1454.182931][ T31] RAX: ffffffffffffffda RBX: 00007fbb19fb5fa0 RCX: 00007fbb19d8e929 [ 1454.191056][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000010 [ 1454.199105][ T31] RBP: 00007fbb19e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1454.207124][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.215216][ T31] R13: 0000000000000000 R14: 00007fbb19fb5fa0 R15: 00007ffee0362468 [ 1454.223299][ T31] [ 1454.226440][ T31] INFO: task syz.2.8349:1775 blocked for more than 145 seconds. [ 1454.234154][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1454.241863][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1454.250630][ T31] task:syz.2.8349 state:D stack:28328 pid:1775 tgid:1770 ppid:25512 task_flags:0x400040 flags:0x00004004 [ 1454.262691][ T31] Call Trace: [ 1454.266007][ T31] [ 1454.269032][ T31] __schedule+0x16f5/0x4d00 [ 1454.273587][ T31] ? __kasan_slab_free+0x62/0x70 [ 1454.278636][ T31] ? security_file_open+0xb1/0x270 [ 1454.283785][ T31] ? do_dentry_open+0x35e/0x1970 [ 1454.288807][ T31] ? __lock_acquire+0xab9/0xd20 [ 1454.293702][ T31] ? schedule+0x165/0x360 [ 1454.298351][ T31] ? __pfx___schedule+0x10/0x10 [ 1454.303253][ T31] ? schedule+0x91/0x360 [ 1454.307510][ T31] schedule+0x165/0x360 [ 1454.311738][ T31] schedule_preempt_disabled+0x13/0x30 [ 1454.317244][ T31] __mutex_lock+0x724/0xe80 [ 1454.321863][ T31] ? __mutex_lock+0x51b/0xe80 [ 1454.326569][ T31] ? misc_open+0x51/0x330 [ 1454.331087][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1454.336160][ T31] misc_open+0x51/0x330 [ 1454.340533][ T31] chrdev_open+0x4cc/0x5e0 [ 1454.345006][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1454.350092][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1454.355069][ T31] do_dentry_open+0xdf3/0x1970 [ 1454.359947][ T31] vfs_open+0x3b/0x340 [ 1454.364045][ T31] ? path_openat+0x2ecd/0x3830 [ 1454.368920][ T31] path_openat+0x2ee5/0x3830 [ 1454.373539][ T31] ? arch_stack_walk+0xfc/0x150 [ 1454.378529][ T31] ? __pfx_path_openat+0x10/0x10 [ 1454.383503][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.389670][ T31] do_filp_open+0x1fa/0x410 [ 1454.394218][ T31] ? __lock_acquire+0xab9/0xd20 [ 1454.399199][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1454.404286][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1454.409488][ T31] ? alloc_fd+0x64c/0x6c0 [ 1454.414043][ T31] do_sys_openat2+0x121/0x1c0 [ 1454.418966][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1454.424212][ T31] ? exc_page_fault+0x76/0xf0 [ 1454.429065][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1454.434409][ T31] __x64_sys_openat+0x138/0x170 [ 1454.439385][ T31] do_syscall_64+0xfa/0x3b0 [ 1454.443925][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1454.449220][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.455314][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1454.460103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.466027][ T31] RIP: 0033:0x7f242478e929 [ 1454.470547][ T31] RSP: 002b:00007f242559c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1454.479045][ T31] RAX: ffffffffffffffda RBX: 00007f24249b6080 RCX: 00007f242478e929 [ 1454.487024][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1454.495171][ T31] RBP: 00007f2424810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1454.503231][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.511284][ T31] R13: 0000000000000001 R14: 00007f24249b6080 R15: 00007ffcbeb04a98 [ 1454.519380][ T31] [ 1454.522452][ T31] INFO: task syz-executor:1858 blocked for more than 145 seconds. [ 1454.530440][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 1454.538199][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1454.546901][ T31] task:syz-executor state:D stack:28008 pid:1858 tgid:1858 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1454.558989][ T31] Call Trace: [ 1454.562294][ T31] [ 1454.565228][ T31] __schedule+0x16f5/0x4d00 [ 1454.569958][ T31] ? __kasan_slab_free+0x62/0x70 [ 1454.574932][ T31] ? security_file_open+0xb1/0x270 [ 1454.580162][ T31] ? do_dentry_open+0x35e/0x1970 [ 1454.585157][ T31] ? schedule+0x165/0x360 [ 1454.589565][ T31] ? __pfx___schedule+0x10/0x10 [ 1454.594471][ T31] ? schedule+0x91/0x360 [ 1454.598821][ T31] schedule+0x165/0x360 [ 1454.603019][ T31] schedule_preempt_disabled+0x13/0x30 [ 1454.608553][ T31] __mutex_lock+0x724/0xe80 [ 1454.613089][ T31] ? __mutex_lock+0x51b/0xe80 [ 1454.617780][ T31] ? misc_open+0x51/0x330 [ 1454.622222][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1454.627325][ T31] misc_open+0x51/0x330 [ 1454.631577][ T31] chrdev_open+0x4cc/0x5e0 [ 1454.636034][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1454.641084][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1454.646082][ T31] do_dentry_open+0xdf3/0x1970 [ 1454.651016][ T31] vfs_open+0x3b/0x340 [ 1454.655134][ T31] ? path_openat+0x2ecd/0x3830 [ 1454.660017][ T31] path_openat+0x2ee5/0x3830 [ 1454.664654][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1454.670204][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1454.675545][ T31] ? __pfx_path_openat+0x10/0x10 [ 1454.680612][ T31] ? __pfx___up_read+0x10/0x10 [ 1454.685404][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1454.690831][ T31] do_filp_open+0x1fa/0x410 [ 1454.695367][ T31] ? __lock_acquire+0xab9/0xd20 [ 1454.700321][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1454.705399][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1454.710362][ T31] ? alloc_fd+0x64c/0x6c0 [ 1454.714740][ T31] do_sys_openat2+0x121/0x1c0 [ 1454.719502][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1454.724732][ T31] ? fd_install+0x97/0x540 [ 1454.729262][ T31] ? fd_install+0x30d/0x540 [ 1454.733842][ T31] __x64_sys_openat+0x138/0x170 [ 1454.738921][ T31] do_syscall_64+0xfa/0x3b0 [ 1454.743545][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1454.749141][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.755256][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1454.760060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.765981][ T31] RIP: 0033:0x7f5141b8d211 [ 1454.770497][ T31] RSP: 002b:00007fff60b69350 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1454.779021][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5141b8d211 [ 1454.787016][ T31] RDX: 0000000000000002 RSI: 00007f5141c11506 RDI: 00000000ffffff9c [ 1454.795071][ T31] RBP: 00007f5141c11506 R08: 0000000000000000 R09: 00007f51428ed6c0 [ 1454.803165][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1454.811466][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1454.820070][ T31] [ 1454.823172][ T31] [ 1454.823172][ T31] Showing all locks held in the system: [ 1454.831481][ T31] 1 lock held by khungtaskd/31: [ 1454.836380][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1454.846724][ T31] 4 locks held by kworker/u8:6/1151: [ 1454.852319][ T31] #0: ffff88801b6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1454.863350][ T31] #1: ffffc90003d67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1454.874049][ T31] #2: ffffffff8f7159d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1454.883486][ T31] #3: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1454.893693][ T31] 1 lock held by klogd/5198: [ 1454.898371][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1454.908418][ T31] 2 locks held by getty/5604: [ 1454.913114][ T31] #0: ffff888030ab60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1454.922973][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1454.933183][ T31] 3 locks held by kworker/1:5/5913: [ 1454.938465][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1454.949536][ T31] #1: ffffc90004d07bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1454.963172][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1454.974627][ T31] 1 lock held by kworker/u8:1/25698: [ 1454.980044][ T31] 2 locks held by syz-executor/32375: [ 1454.985442][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1454.994034][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1455.004156][ T31] 1 lock held by syz-executor/811: [ 1455.009319][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.017826][ T31] 2 locks held by syz.8.8341/1231: [ 1455.023023][ T31] #0: ffff8881432c8100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1455.032897][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1455.043097][ T31] 2 locks held by syz.8.8341/1232: [ 1455.048304][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1455.058548][ T31] #1: ffff8881432c8100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1455.068292][ T31] 1 lock held by syz.2.8349/1775: [ 1455.073316][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.081871][ T31] 1 lock held by syz-executor/1858: [ 1455.087081][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.095657][ T31] 1 lock held by syz-executor/1960: [ 1455.100952][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.109562][ T31] 1 lock held by syz-executor/1969: [ 1455.114788][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.123397][ T31] 1 lock held by syz-executor/1982: [ 1455.128790][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.137299][ T31] 1 lock held by syz-executor/2001: [ 1455.142596][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.151168][ T31] 1 lock held by syz-executor/2003: [ 1455.156377][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.164912][ T31] 1 lock held by syz-executor/2007: [ 1455.170161][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.178752][ T31] 1 lock held by syz-executor/2018: [ 1455.183972][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.192505][ T31] 1 lock held by syz-executor/2036: [ 1455.197718][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.206306][ T31] 1 lock held by syz-executor/2039: [ 1455.211737][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.220282][ T31] 1 lock held by syz-executor/2043: [ 1455.225493][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1455.234049][ T31] [ 1455.236402][ T31] ============================================= [ 1455.236402][ T31] [ 1455.245755][ T31] NMI backtrace for cpu 1 [ 1455.245767][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1455.245784][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.245793][ T31] Call Trace: [ 1455.245799][ T31] [ 1455.245805][ T31] dump_stack_lvl+0x189/0x250 [ 1455.245826][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1455.245848][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.245865][ T31] ? __pfx__printk+0x10/0x10 [ 1455.245890][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1455.245912][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1455.245930][ T31] ? _printk+0xcf/0x120 [ 1455.245948][ T31] ? __pfx__printk+0x10/0x10 [ 1455.245965][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1455.245990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1455.246012][ T31] watchdog+0xfee/0x1030 [ 1455.246028][ T31] ? watchdog+0x1de/0x1030 [ 1455.246047][ T31] kthread+0x70e/0x8a0 [ 1455.246068][ T31] ? __pfx_watchdog+0x10/0x10 [ 1455.246081][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.246102][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1455.246123][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.246144][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.246164][ T31] ret_from_fork+0x3f9/0x770 [ 1455.246180][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.246199][ T31] ? __switch_to_asm+0x39/0x70 [ 1455.246216][ T31] ? __switch_to_asm+0x33/0x70 [ 1455.246246][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.246265][ T31] ret_from_fork_asm+0x1a/0x30 [ 1455.246292][ T31] [ 1455.246298][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1455.403847][ C0] NMI backtrace for cpu 0 [ 1455.403866][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1455.403887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.403899][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1455.403937][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 09 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1455.403953][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 1455.403969][ C0] RAX: 6bc83d99a2a9ec00 RBX: ffffffff81979d58 RCX: 6bc83d99a2a9ec00 [ 1455.403995][ C0] RDX: 0000000000000001 RSI: ffffffff8da4c121 RDI: ffffffff8be41880 [ 1455.404008][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1455.404021][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fc232f0 [ 1455.404034][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a50 [ 1455.404045][ C0] FS: 0000000000000000(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 1455.404059][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.404071][ C0] CR2: 00007ffea0d91440 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1455.404086][ C0] DR0: 0000000000000001 DR1: 0000000000000006 DR2: 0200000000000001 [ 1455.404097][ C0] DR3: 0000000000000003 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1455.404108][ C0] Call Trace: [ 1455.404116][ C0] [ 1455.404122][ C0] default_idle+0x13/0x20 [ 1455.404140][ C0] default_idle_call+0x74/0xb0 [ 1455.404159][ C0] do_idle+0x1e8/0x510 [ 1455.404178][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1455.404198][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.404225][ C0] ? __pfx_do_idle+0x10/0x10 [ 1455.404248][ C0] ? do_idle+0x4f5/0x510 [ 1455.404267][ C0] cpu_startup_entry+0x44/0x60 [ 1455.404286][ C0] rest_init+0x2de/0x300 [ 1455.404306][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1455.404333][ C0] start_kernel+0x47d/0x500 [ 1455.404353][ C0] x86_64_start_reservations+0x24/0x30 [ 1455.404377][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1455.404401][ C0] common_startup_64+0x13e/0x147 [ 1455.404432][ C0] [ 1455.404910][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1455.625410][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1455.637224][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.647285][ T31] Call Trace: [ 1455.650570][ T31] [ 1455.653520][ T31] dump_stack_lvl+0x99/0x250 [ 1455.658129][ T31] ? __asan_memcpy+0x40/0x70 [ 1455.662738][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.667955][ T31] ? __pfx__printk+0x10/0x10 [ 1455.672563][ T31] panic+0x2db/0x790 [ 1455.676467][ T31] ? __pfx_panic+0x10/0x10 [ 1455.680884][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1455.686705][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1455.692092][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1455.698278][ T31] watchdog+0x102d/0x1030 [ 1455.702643][ T31] ? watchdog+0x1de/0x1030 [ 1455.707085][ T31] kthread+0x70e/0x8a0 [ 1455.711180][ T31] ? __pfx_watchdog+0x10/0x10 [ 1455.715871][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.720475][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1455.725689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.730907][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.735511][ T31] ret_from_fork+0x3f9/0x770 [ 1455.740110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1455.745233][ T31] ? __switch_to_asm+0x39/0x70 [ 1455.750011][ T31] ? __switch_to_asm+0x33/0x70 [ 1455.754789][ T31] ? __pfx_kthread+0x10/0x10 [ 1455.759403][ T31] ret_from_fork_asm+0x1a/0x30 [ 1455.764216][ T31] [ 1455.767624][ T31] Kernel Offset: disabled [ 1455.771969][ T31] Rebooting in 86400 seconds..