last executing test programs: 4m24.940331669s ago: executing program 2 (id=774): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async) read(r0, &(0x7f0000000100)=""/155, 0x9b) 4m24.392551393s ago: executing program 2 (id=780): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r3, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) syz_open_dev$usbmon(&(0x7f0000000cc0), 0x3, 0x8000) (async) syz_open_dev$usbmon(&(0x7f0000000cc0), 0x3, 0x8000) close(0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)={0x2}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)={0x2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x284303, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x284303, 0x0) preadv(0xffffffffffffffff, &(0x7f00000041c0)=[{&(0x7f0000001040)=""/102, 0x5}], 0x2, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000041c0)=[{&(0x7f0000001040)=""/102, 0x5}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r8, 0x5, 0x5, 0x1, 0x2, [], [0x3, 0xc1, 0x7, 0xdf], [0xe06b, 0x3, 0x3ff, 0xafbc], [0x3, 0x101, 0x7fff, 0x8]}) r9 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m24.134866941s ago: executing program 2 (id=784): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x84}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x84}) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) (async) 4m23.9699403s ago: executing program 2 (id=788): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000000000008, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000006c0)) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x20024) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m22.784505588s ago: executing program 2 (id=799): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m21.352672342s ago: executing program 2 (id=807): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) read(r0, &(0x7f0000000100)=""/155, 0x9b) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x3, 0x5a}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x400000, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r5, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async, rerun: 32) mmap(&(0x7f000071f000/0x4000)=nil, 0x4000, 0xa, 0x10, r0, 0xb7a83000) (rerun: 32) preadv2(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000002c0)=""/184, 0xb8}], 0x2, 0x30000000, 0x20, 0xa) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) 4m6.001662331s ago: executing program 32 (id=807): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) read(r0, &(0x7f0000000100)=""/155, 0x9b) (async, rerun: 64) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x3, 0x5a}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x400000, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r5, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async, rerun: 32) mmap(&(0x7f000071f000/0x4000)=nil, 0x4000, 0xa, 0x10, r0, 0xb7a83000) (rerun: 32) preadv2(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000002c0)=""/184, 0xb8}], 0x2, 0x30000000, 0x20, 0xa) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) 32.562651153s ago: executing program 0 (id=2621): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000005, 0x1010, r0, 0x547e4000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 32.265718935s ago: executing program 0 (id=2625): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r2, &(0x7f0000001e80)=""/96, 0x60) read(r1, &(0x7f0000000180)=""/101, 0x65) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000786000/0x4000)=nil, 0x4000, 0xe, 0x100010, r3, 0xc6c9e000) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000100)={0x400, 0x40}) 32.133328415s ago: executing program 0 (id=2626): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000001740)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close(0x3) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xffffffffffffff80, 0xfffffffffffffffe, 0x0, {{0x2, 0x3, 0x1, 0x6bf, 0x400008, 0x0, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x8, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x4}}, {0x0, 0x18}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000280)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000380)={0xce}) r8 = dup(r5) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x1000001, 0x8010, r5, 0xc59aa000) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 30.921645979s ago: executing program 0 (id=2637): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xd8500, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0xe}) (async, rerun: 32) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x50) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x34325258}) (async) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000000c0)={0x50, 0x3f, 0xd, {0x2, 0x1}, {0x8000, 0x7}, @cond=[{0xeeb, 0x405, 0x4, 0x3, 0x8}, {0x2, 0x2, 0x5, 0x6, 0x6, 0x3b7e}]}) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, &(0x7f00000006c0)}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000300)={0x0, 0x6}) 30.5405227s ago: executing program 0 (id=2639): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r2}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r1, 0xb2874000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r3, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2308217f014f", @ANYRES16=0x0, @ANYRES16], 0xffdd) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 29.594526925s ago: executing program 0 (id=2650): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) read$FUSE(r2, 0x0, 0x0) mmap(&(0x7f0000533000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f00000b4000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x5a1bc000) 18.834522034s ago: executing program 3 (id=2730): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) write$vga_arbiter(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x3, 0x100000001, 0x0, 0x6, 0x2, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) read$FUSE(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) read$FUSE(r5, &(0x7f00000003c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r7, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)={0x7, 0x0, [{0x3aa, 0x0, 0x7}, {0xb9b, 0x0, 0x2}, {0x48d, 0x0, 0x2}, {0x188, 0x0, 0x2}, {0x92b, 0x0, 0xfb}, {0xa85}, {0x894, 0x0, 0x101}]}) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x32314742}}) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 18.772768351s ago: executing program 4 (id=2731): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x4, 0x2000, &(0x7f0000fd2000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read(r0, &(0x7f00000001c0)=""/162, 0xa2) mmap(&(0x7f0000fd3000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0xffffe000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 18.65970034s ago: executing program 4 (id=2733): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000001c0)={0x10, 0x0, "18a9b1105cd9ea410e82ef54ef323263"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000001c0)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec8502"]) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000002a82, 0x0) r7 = dup(r6) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.724192913s ago: executing program 4 (id=2736): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x7f, 0x4, 0x7, 0x6}) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) (async, rerun: 32) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 17.537465275s ago: executing program 3 (id=2738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) r4 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000080)={0x0, "c430d30c2289a9630a942dd187a55b973365715ecd36db572504d2fbf9a7db59"}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000010440)={'rose0\x00', 0x112}) r9 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000010000)) ioctl$TUNATTACHFILTER(r8, 0x400454d1, 0x0) r10 = dup(r7) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r11, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}], 0x8}) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000000b00)={[0x6, 0x109e, 0x480, 0xfffffff7, 0x0, 0x9, 0x8, 0x10, 0x4, 0x99d5, 0x280000, 0x562, 0x8, 0x7, 0x5, 0x10001, 0x100, 0x7, 0x0, 0x9, 0xe, 0x72ae465f, 0x7, 0xff, 0xfffffffd, 0xffffffff, 0x7, 0x9, 0x7f, 0xffffff4d, 0x31, 0x200, 0xd, 0x101, 0x8, 0x5, 0x401, 0xb, 0x101, 0x3, 0x0, 0x7, 0x8, 0x7, 0x3, 0x4, 0x200, 0x200, 0x2, 0x3, 0x81, 0x799f8230, 0x4, 0xfff, 0x8d4, 0x1, 0x30, 0x4, 0x10001, 0x200, 0x200, 0x3ff, 0x8, 0x8001, 0x0, 0x366d, 0x0, 0x0, 0x6, 0x5, 0x2, 0xfffffb68, 0x8, 0x4, 0x5, 0x8, 0xf88f, 0xf46c, 0xe, 0x400, 0x5, 0x9, 0x9, 0x3, 0xa64, 0x8, 0x4, 0x9f, 0x5, 0x0, 0x7, 0x40, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x1, 0x5, 0x6, 0xec1, 0x10, 0x9, 0x8, 0xf716, 0x9, 0x101, 0x2, 0x2, 0x6f, 0x1, 0x70000000, 0x0, 0xc, 0x3, 0x7ff, 0x401, 0x8, 0xffffff00, 0xd2f, 0x6, 0xfffffffb, 0x10000, 0xffff04e6, 0xda29, 0x2, 0x8, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0x2a8c, 0x9, 0x9, 0xdd, 0x7, 0x9d, 0x6, 0xd, 0x200, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x8, 0x1, 0x4, 0x8, 0xce, 0xcb8c, 0x80000001, 0x1, 0xdd1, 0x2, 0x7, 0x2, 0x8000, 0x8, 0x6f9, 0xe1f2, 0x8, 0x9, 0x8, 0x6c, 0x5, 0xfffffffb, 0x7, 0x5, 0x200, 0x0, 0x49a7, 0x6, 0x9, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0xc, 0x5, 0xc, 0x7, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1000, 0xc2f, 0x3ff, 0xffffffff, 0xc2, 0x8, 0x6, 0x6, 0x5, 0x6, 0x10000, 0x8, 0x4, 0x5, 0xfffffffb, 0x9, 0x4, 0xff, 0x4, 0x8000, 0xffff, 0x6, 0x400, 0xf8d, 0x400, 0x1, 0x0, 0x5, 0x47c, 0x10, 0x2, 0x5, 0x3, 0x7, 0x8, 0xec41, 0x6, 0x6c4, 0xd62, 0xa89346f, 0x1, 0x8475, 0x3c, 0x40, 0xc1d, 0xb395, 0xb7e, 0x3, 0x9, 0xcc, 0x6, 0x5, 0xffffff1b, 0x5, 0x1000, 0x0, 0x4, 0x95, 0xb, 0xe71, 0x5, 0x8d0, 0xe678, 0x7fffffff, 0x14b8b8c6, 0x0, 0x6, 0x5, 0x2610d6ef, 0x4, 0x8, 0x3, 0x0, 0xfffffff7, 0x5, 0x1, 0x7f, 0x7fff, 0xffffffff, 0x6, 0xffff767b, 0x7, 0x7, 0x8, 0x5, 0x0, 0x2392, 0x7f, 0x0, 0x2, 0x1000, 0x650, 0x5, 0x9, 0xda, 0x6, 0x9, 0xfffffff2, 0x4, 0x5, 0x8, 0x80000001, 0x3, 0x1, 0x5, 0x4, 0x4, 0x1, 0xdb5, 0x5, 0x4, 0x6f6c, 0x800, 0xe, 0x7, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7, 0x7, 0xffffffff, 0x6, 0x3, 0x8, 0x8, 0x8e, 0x8, 0x3, 0x8, 0x5, 0x31a2, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7f, 0xb, 0x7, 0x7, 0x0, 0x8, 0x9, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0x9a, 0x10001, 0xffff, 0x8000, 0x9, 0x5, 0xb18e, 0x9, 0x459, 0x1, 0x3c96, 0x800, 0x7, 0x7, 0x4, 0x7, 0x5, 0x6a65, 0x0, 0xa, 0x3, 0x401, 0x242b, 0x1, 0xfff, 0x5, 0x7, 0x4, 0xfffffff7, 0x300000, 0x200, 0x0, 0x3, 0x6, 0x9, 0x483, 0x7ff, 0x4b71, 0x2, 0xfe000000, 0x2, 0x2, 0x5, 0x0, 0x8c3, 0x51, 0xfff, 0x4, 0x6, 0x3, 0x7ff, 0xaea5, 0xfffffffd, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8001, 0x101, 0xd, 0x6b000, 0x8, 0x255, 0x1, 0x9, 0x1, 0x4, 0x3, 0xe5c, 0xf6, 0x4, 0x80000001, 0x0, 0x5, 0x400, 0xffffffff, 0x1, 0x2, 0x5, 0x3, 0x1, 0x4, 0x7, 0x0, 0xef11, 0x2, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x72, 0x800, 0x0, 0x0, 0x3, 0x7b0, 0x3, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x7, 0x9, 0x8, 0x9, 0x0, 0x2c00000, 0x3ff, 0xde, 0x0, 0x317eea0e, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0xfe, 0x10000, 0x8, 0x365, 0x81b, 0x9, 0x1, 0x9, 0x9, 0x3, 0xfff, 0x6, 0x8, 0x6, 0x3, 0x5, 0x400, 0x6981, 0x8, 0x2, 0x401, 0xfe000000, 0x3, 0x5954, 0x7af, 0x2, 0x3252b61e, 0x1ff, 0x8, 0xffffff1c, 0xb6f7, 0x7, 0x0, 0x6051, 0x4, 0xad, 0x4, 0x28, 0x2, 0x6, 0xe, 0xffff, 0xf, 0x9, 0x6, 0x7a6, 0xe, 0xb, 0x400, 0x6, 0x4, 0xa3, 0x4, 0x1, 0x6, 0x800, 0x2, 0x285, 0x2, 0x70, 0xad39, 0x6, 0x3, 0x3, 0x2, 0xd, 0x10001, 0x96e, 0x8, 0x578, 0x9, 0x8, 0xffff, 0x39d2, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x2, 0x19, 0x0, 0x5, 0xfffffffd, 0x4f972ec5, 0x0, 0x4, 0x2, 0xc, 0xf, 0x80000000, 0x2, 0x5, 0x2, 0x78f, 0x200, 0x8001, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x8, 0x80000000, 0x7fffffff, 0x68b, 0x80000000, 0x4, 0xfffff001, 0x93, 0x8, 0x2, 0x3d, 0x3, 0x3, 0x8, 0x3, 0x8001, 0x8, 0x4000000, 0x6, 0x7, 0x4, 0xb73, 0x0, 0xbcfd, 0x1ff, 0xffffffe6, 0x3, 0x4, 0x7, 0x4b, 0x3, 0x9, 0xc000000, 0x2, 0x7, 0x1ff, 0x3, 0x2, 0x803, 0x8, 0x7, 0x0, 0xad, 0x2757, 0x2, 0x10001, 0xf11, 0x9, 0x7, 0x8, 0x8, 0x1, 0x8, 0x283, 0x5, 0xa, 0x3, 0x40, 0x200, 0x5, 0x3, 0x1ad6, 0xe80b, 0xffffffff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x10, 0x1, 0x54, 0xffffffff, 0x8, 0x4, 0x73b9, 0x80, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7f, 0x1, 0x9, 0xffffffc0, 0x9, 0x2, 0x1, 0xe, 0x1, 0x3, 0x4ff, 0x5, 0xffff, 0x0, 0x80000000, 0x82be, 0x5e, 0x10001, 0x6, 0x7, 0xc, 0x0, 0x4, 0x4, 0x4, 0x4, 0x7, 0xf, 0xfffffff9, 0x6, 0x1, 0x8, 0x3, 0x9, 0x4, 0x7, 0x10, 0x400, 0x4, 0x6, 0xfffffff8, 0x7, 0x1, 0x6, 0x1, 0x563240ed, 0xaf4, 0x401, 0x7, 0xffffffff, 0x6, 0xfffffffa, 0x0, 0x100, 0xd6a7, 0x10001, 0x0, 0x3, 0x7, 0x1, 0x19a3, 0xbdc, 0x6, 0x3, 0x4, 0x3, 0xfffffc00, 0x6, 0x30b747e5, 0xf1af, 0x1, 0xfffffff8, 0x1, 0x4, 0xb, 0x2, 0xffffffc0, 0x81, 0x588, 0x8, 0xef6d, 0x9, 0x0, 0x7, 0x7c, 0x2, 0x6, 0xfffffffc, 0x1, 0xffffffc0, 0xbe83, 0xa8, 0xfcba, 0x10001, 0x6, 0x0, 0x3, 0x6, 0x401, 0x0, 0x2, 0xc, 0x1, 0xffff, 0x6, 0x0, 0xffff, 0x419f, 0x3, 0x0, 0x6, 0xc, 0xd6, 0x10a, 0x0, 0x2, 0x5, 0xffff, 0x7c9d, 0x1, 0x9, 0x0, 0x2, 0xfffffffd, 0x6000, 0x4, 0x0, 0x101, 0x762, 0x400, 0x39a0, 0xd1fa, 0x1, 0x10000, 0x8, 0x8, 0x80000000, 0x1000, 0xc1e5, 0xce59, 0xfff, 0x1, 0xbd, 0x1, 0x10, 0x2, 0x4, 0x3, 0x9, 0xffffffc0, 0x10000, 0xab32, 0x9, 0x4, 0xffffffff, 0x8274, 0x1f0, 0x3, 0x2c3, 0x61, 0x5, 0x1ff, 0x3, 0x0, 0x401, 0x5, 0x80000001, 0xfffffff7, 0x1000, 0x1800, 0x651, 0x693b, 0x1, 0x80000001, 0x1, 0x2, 0x7f, 0x5, 0xfff, 0x48f, 0x2, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffb, 0x10, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9, 0xd, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x6, 0x7, 0x2, 0x7ce4, 0x6, 0x4, 0x2, 0x4e, 0x7f02, 0xffff, 0x5, 0x70, 0x20e1, 0x200, 0x6, 0x4, 0xd088, 0x800000, 0x6, 0x7ff, 0x8, 0x2, 0x5, 0x10001, 0x287, 0x8, 0x4, 0x7, 0x6, 0x0, 0x7f, 0x1, 0x5f6e, 0x3, 0x9, 0x8, 0x1, 0x9, 0x7c7, 0x3, 0x4, 0xfffffffc, 0x7, 0x4, 0x2, 0x2, 0x1ac, 0x8, 0x101, 0x7ff, 0x10, 0x8, 0x8000, 0x6, 0x6d3, 0x8, 0x9, 0x0, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9693, 0x5, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3, 0x1, 0x0, 0x7, 0x9140, 0x0, 0xfffffff8, 0x6, 0x3, 0x8, 0x1, 0x9, 0x0, 0x8, 0xfd000, 0x200, 0x40, 0x4, 0x8000, 0x2, 0x926096c, 0x9, 0xd, 0x0, 0xaeb, 0xa20, 0x8, 0x1ff, 0xfffffffe, 0x39b, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0xa, 0x5, 0x2dcc, 0xfe, 0x8000, 0x5, 0x800, 0x8, 0x8000, 0x0, 0x75ff, 0x1000, 0x9, 0x6, 0x1, 0xaf, 0x8, 0x7, 0x3, 0x8, 0x2b5ab7ea, 0x0, 0x1, 0x2, 0x7, 0xfffffffb, 0x2, 0x0, 0x7ff, 0xec, 0x6, 0x3ff, 0x9, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff7, 0x5, 0x701, 0x9, 0xb05, 0x3, 0x3ff, 0x0, 0x9, 0x8, 0x4, 0x20, 0x3, 0x9, 0x26ec, 0x40, 0x6, 0x267, 0x80000001, 0xff, 0x9, 0x1, 0x8, 0x100, 0x1ff, 0x8, 0xd, 0x7, 0x7, 0x7]}) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01008eec99bda59532cef5724b46130000000000008804000000000000060100000000000023f640193b473f3e6b7c2740fcf8c14e74a10fd2985a43794600435a9af50c7bb6413fa99186124d11f82e1a"]) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x4, 0x200, &(0x7f0000000880)="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"}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) 17.413363027s ago: executing program 4 (id=2739): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @ext={0xe, &(0x7f0000000380)="66978bbf96950272ae59d7f9e424"}}], 0x1c) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.087644912s ago: executing program 1 (id=2740): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0xf45f5000) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x120000, 0x0, [0x100000001, 0x6, 0x3, 0x8, 0x7fffffffffffffff, 0x7, 0xf8, 0x7]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000280)={0x70003, 0x0, [0x1, 0x6, 0x200000000000001, 0x3, 0x3, 0x8, 0x10000, 0xa40]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x6}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r2, 0x7dfff000) 16.780550422s ago: executing program 1 (id=2741): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x7ff, 0x3}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) r5 = dup(r3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup(r6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, 0x0) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0x2000) read$FUSE(r5, &(0x7f0000002c40)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x100000000, 0x9, 0x0, [{0x11, 0x89, 0x7, 0x8, 0x3, 0x7, 0x81, '\x00', 0x3}, {0xd, 0x4, 0x7, 0x7f, 0x61, 0x8, 0xff, '\x00', 0x100}, {0x101, 0x8, 0x7, 0xff, 0x19, 0x0, 0x40}, {0x40, 0x4, 0x1, 0xe, 0xf9, 0x80, 0x5, '\x00', 0x8}, {0x8, 0x8, 0x7, 0x1, 0x9, 0x8, 0x4, '\x00', 0x9}, {0x5, 0x3d16, 0x7fffffff, 0x6, 0x3, 0x9, 0x6, '\x00', 0x3}, {0x2e913cf3, 0x9, 0x3, 0xfb, 0x9, 0xc, 0x6, '\x00', 0x400}, {0x101, 0x4, 0x4, 0xfc, 0x3, 0xd, 0x80, '\x00', 0xc}, {0x2, 0xb6, 0x1, 0x1, 0xb, 0x6, 0xba, '\x00', 0x6}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, 0x0) ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f0000000340)) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1b, 0x202812, r12, 0xc3a35000) 16.658318897s ago: executing program 3 (id=2742): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x284801, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x284801, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r4, 0xeeeeeeee}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x26}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x26}}, './file0\x00'}) ioctl$DRM_IOCTL_SET_UNIQUE(r11, 0x40106410, &(0x7f0000001240)={0x1000, &(0x7f0000000240)="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"}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r11, 0x40106410, &(0x7f0000001240)={0x1000, &(0x7f0000000240)="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001280)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001280)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001680)={r12, 0x6, 0x5, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001680)={r12, 0x6, 0x5, 0x1}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r11, 0xc040564b, &(0x7f0000001a80)={0x9, 0x0, 0x1006, 0xfffffffd, 0xfffffff7, {0x4, 0x8}, 0x1}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000001ac0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000001b40)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r14, 0xc01064bd, &(0x7f0000001c80)={&(0x7f0000001b80)="4fdf521fb66436049b732a75ba025f4b223c276c9dfa783b29ca3c96d4de719508e4f5b155a9b58ed7671b0b88fcf91134378c13158c13152920383b75ec4845e8b819b975b7f7d0664e2f59820aba4ebe96ff20b6dac49805a7667be772ad991c136e546ed9720b144fdfa8e43b906e6b3437619ccaca298bff3d7346e4551b15028ad7c8fbfb2cdf7f7ec5e3e5fd8fcc42c07e74c3b0d23fa79120aeb8298370c46e183f4b6231a2ac32f9e965f1359b885fffafbc80f1ca791195f948237d3d5e17824618b5533b692063dddb3f30b0996bce35cb2a53", 0xd8, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000001f00)={&(0x7f0000001d40)=[0x0, 0x0], &(0x7f0000001d80)=[{}, {}, {}], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000002000)={0x301, 0x1, &(0x7f0000001cc0)=[r10], &(0x7f0000001d00)=[0xaca, 0x9, 0xfff], &(0x7f0000001f80)=[r8, r4, r17, r5], &(0x7f0000001fc0)=[0x8], 0x0, 0x4}) r21 = syz_open_dev$usbmon(&(0x7f0000002040), 0x7, 0x10041) read$usbmon(r21, &(0x7f0000002080)=""/207, 0xcf) write(r0, &(0x7f0000002180)="d3bfe0010357e3f66b739cced3d8623a51b13a14e7cf94b5196096", 0x1b) close(r14) ioctl$DRM_IOCTL_SET_MASTER(r13, 0x641e) (async) ioctl$DRM_IOCTL_SET_MASTER(r13, 0x641e) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f00000022c0)={0x0, 0x2, &(0x7f00000021c0)=[r20, r6], &(0x7f0000002200)=[0x7, 0xfffffffa, 0x0], &(0x7f0000002240)=[r20, r18, r5, r8, r2], &(0x7f0000002280)=[0x100, 0x4, 0xffffffffffffff62], 0x0, 0x8}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f00000022c0)={0x0, 0x2, &(0x7f00000021c0)=[r20, r6], &(0x7f0000002200)=[0x7, 0xfffffffa, 0x0], &(0x7f0000002240)=[r20, r18, r5, r8, r2], &(0x7f0000002280)=[0x100, 0x4, 0xffffffffffffff62], 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000002400)={&(0x7f0000002380)=[0x0, 0x0, 0x0], &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r18, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002300), &(0x7f0000002340)=[0x1, 0x7, 0x2, 0x8001, 0x2, 0x0], &(0x7f0000002440)=[r17, r2, r8, r22], &(0x7f0000002480)=[0x10, 0x4, 0x80000001, 0x4], 0x0, 0xffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000002600)={0x100, 0x2, &(0x7f0000002500)=[r15, r3], &(0x7f0000002540)=[0x8, 0x1000], &(0x7f0000002580)=[r7, r7, r10], &(0x7f00000025c0)=[0x3, 0x4, 0xffffffffffffffff, 0x6], 0x0, 0xffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000002640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r13, 0xc01064c1, &(0x7f0000002680)={r23}) ioctl$DRM_IOCTL_MODE_GETENCODER(r14, 0xc01464a6, &(0x7f00000026c0)={r16, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000002800)={&(0x7f0000002780)=[0x0, 0x0], &(0x7f00000027c0)=[0x0], 0x2, r9, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000002900)={0x1, 0x6, &(0x7f0000002700)=[r24, r2, r19, r17, r19, r20], &(0x7f0000002740)=[0xeefc, 0x4, 0x7, 0x2, 0x9, 0xbfdc], &(0x7f0000002840)=[r1, r3, r25, r1], &(0x7f0000002880)=[0xc737, 0x3, 0x8, 0x6, 0xe1b0, 0x6, 0x100000001, 0x6, 0x85d, 0x0], 0x0, 0x401}) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000002980)=0x1) (async) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000002980)=0x1) 16.541822715s ago: executing program 4 (id=2743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r1, &(0x7f0000000040)='\f', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 16.444710908s ago: executing program 3 (id=2744): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28300, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28300, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) 16.36075094s ago: executing program 1 (id=2745): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x0, 0x1, r3, 0x0, 0x97, 0x8000000}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x6, 0x3, 0x6, 0x2}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r3, 0x0, 0x5, 0xffff}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000002c0)={r5, 0x3, 0x9, 0x6, 0xaa7, 0x0, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 16.278552664s ago: executing program 4 (id=2746): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x115000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x101, 0xc}) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000020c0)=0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000002100)={0x0, @adiantum, 0x0, @desc3}) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000002140)) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000022c0)={&(0x7f00000021c0)=""/199, 0xc7}) (async) preadv(r0, &(0x7f0000002300), 0x0, 0x8001, 0x9) r2 = dup(r0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000002340)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000002380)={{r2}, 0x80, 0xa429, 0x23b}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002880)={{r2}, r1, 0x8, @inherit={0x88, &(0x7f00000023c0)={0x0, 0x8, 0x2, 0x7, {0x1, 0x4, 0x5, 0x4, 0x8}, [0x8, 0x0, 0x2, 0x176, 0x1, 0x6, 0x4, 0x4b8d588c]}}, @devid=r3}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000003880)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000038c0)) (async, rerun: 64) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000003900), 0x2, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000003940)={{r0}, "368b7fb503c54d51425356df3099c76f122b8d13c960faf40858888ea8793ba96d40a215513c2ec14152d787257dd93cee724ca3db0a7236a3e5bb0995daaabab1e9e1f09924130fbd7e6c78f981359d9889789d41cfe1f7ddf04e4a1563e204efa49b13c8d190e2d6dfa9ee16cf63d7da5aa59e259f58e6f108029e1d7239613f701efe60742686d35c773ce74fd915f1be9fa9242e2db46b9473ba5302cec834cee362f8aa3a42e755fdd178ae61680d858b45394e407c07297b4a63914be75d4991234bfbc58b5678614140bff852c1679b54d5538ff730704a1a224a75dcab8b79aa5d53980b7a5f55e7888a17f516525103fe2ebc01619c068fe136305c5b367bd7fd01842e9f172cea4dd7b941eb652992760ebc412119bff7593ad5e9c4b0bbd580b410de8f48dca795dfddc6412158f56f302d5b153193d1af6cf3202e590ef7e4b6763a90995d7034a5f8e62868b0537f85ece351bfecc6bbd6495394077592489cde3e8b287b8e229175861a28f63bdce13f08db849e58bbae1c558ab05fddc00f9af55a9a15007e052009c38344cb9e1de25341b7daa64cfde60052a9b262a0597f5f555abedda2ffd8dbb32249ae3365c348f5535b4fdb60e6fd7319ad09e36eafed4226395f2f614ad63690d7e5d7e1abdfcc05507c62269df43ada22d2a575ffee8f3fae70901d72d0b32c7490e1460853e21d9dbc5da9a938e1134882d1fa529ea378795bdf371670c5ba80ede097eddf78cedb39ea43aa64b9e39e8f75054b4c219eeacb7dfd9fc775932ce2326ba27c38d9b02ff315d77f1801ced18b14c608fa97416949141a19926dbe05dc5072317fe4e51c01f5ad2e71a81db319ccd72f36a89e1c6083465b7f221b3ef24291e69613b624085e3ae2c7bc3e48780aa2805ab20bc4d695ea0bc7d6543ae832453ddb15a3aadb28c0d2f2a574ddefb22da0d1ae30d428829a7f8aca46f43282515c50a3a4d4418503c87f4f361280c3479a279f42721e3e37c05819b7d3a93b55a1f544c457d168c28a46558e385afe677f3c434237cc3b3c8eb2d9844600d2296a8203f901735fe5a79f978f6d3b1b88efa9dfee166abe12b7be6d5881d112765ac81fc3dcec2a1e73ba57decce8a5224457da0f1bf8e2966ccb553774e204fc7cbc6bb80c16f2da4b52ee3d8936ca771cdb8ec038ba0a0aedd16a04cc00481528a5012622a07a71754f0d45bc06607e1249acce33f4ba3699949a3a93c2d50df948f6a0f757356d0a0c3bf89bf30321202f72bb4c04e5247c041fb2ad79a566b8b2ee84ba31c9b51964d6ce39f05f6dd5d73885d850d30fe93aa2f8f363dc957f5fbd74ecaa71d52e86ff5d8e9110c0dc85cc31c765b60b1df1768a12f3bfcb231ec6f8fd203b93c271b7f777e24331af3b0b44435df171860e8b202d563c51a93716e98e34b33b8f37643c24a080327fc541e09c014b3b99cae946c2d3fe637d43052fc97750bc85d06c773bef81ffb880027ef23e37015503923cb6ad9485ee49a856724295d6d047ee27ddeae1f38cbb6bdc492988c38d77c77f1fd03e1e5939794a1de16342ec0019ecd5c752e7b9a01f5c0659b6ea3630d0fb2654f440f6e024e6b9779f1ff07c3229b0990e212e9733c11df5f6fde29d391d2a06957f5af9e0a2ae61db643c7dd2f13dc23fae604ff358cdcf4be3488622dbaa896390ecbabd5587cdfd028091575612bf3b0bcc28fddad46ff0cc5451a13e4fd122f756ef3cf13a25a098d3da2fbf031d954026d62a8ace920b465a98c5f2dfaa28810cc5dfb6206c1dc3642b82690fe083dc235768ea1111cf32c65a7d586ea6f1dc8322691621210414bae800fbc6851b988b1d85774d08af10149e883f20774522f5fc45594f5b01c147aa92ca97b41514c1318bdf23ad7e2489aacb3527b0144c7690b46d4fa80f2f62240735ba3b582ec738288fb4dcf31a015a599bbee73dadafd864fc4931782aa58e0e9ce4cc763898d0f040de9b0d0beb45b4a70cb4968ade9a4f3fd70fcf4150d1dbc253f57db15be9ba185cb86cc936a7819ef185d86853627616f94840c03356ccdfe10b0775d99989f149420497961bcceb19e7cc3454c2c8f43109dcfad98f493d3153f34327c9ab88f51f491c9cf28cdd38a9834ef3145ae4bb984824aa3166fee33e17fe58454bb706f37b06fe072475ccec75023be1cb549483e6fdb9c5b70ce97e67ce614f54317bd82d2205307312ef86503eb751158397899b7181cc95ff2264a9f55e004188b641cc87d0d3cbc020d406be4cd71b1a14d6e90e5bede7efd6a7e29311b870506e9be3a8f94c6bc908b99fd671cd67f206049879eb6dd1948b3fe7f62db157573a8132ce2d38cac44979516581402762827472de52d96c9192eea823454976996960d35cb91750fb939213d7ebd433d8fac0fb58ca50945665446c920973bf7c70af3277f00351f233d64bfe55fe7f4269e861f413c9457c842709fbcb8784e5ea2806bf9812ad7343c6d24e3d076c59e9d184869a6ee4caa07857e49de76c28b4067b91abcd0c118846cf04b8169ad28504f6fb97565d363407f7422b39bca0c3854f3b4e5b0307dd0c76bdbe9e408e561c7000fd35ef773084c77714e1dbe316a2cff60a47bf75aa4be5b5ba3db761f4d30530b3523cdaa0a4b02a15b4c12d2be309af68d9465596c88466b67bce927272af9e91fa47314f23522af3f744b5fab615ad1773adf20cd061ddf3730aa7b23c437a79c00262785e8d12970d1f4a0f0198fb881d0e9441a63a1eb3f9b6c541788f3581c04d0a36ebc0db0f1464e8b4eedbfcb223eb523ea3f11c6b6d6f08ade8dad805fe9f36beaa0ee3cf453e5ede77f34c3ac87051311ab1e7951bc75bf5b96a579074d40169c1782e37f720c912559bbb2d1b0dd55078e0ab4613fd6570f4c7aee777acee1c8fbca99d4208e414899b8c176441771d013b4b04f32deeaaa08028cb9898355ad14f9d87692636aea0390df38a122820b3d2ba8b6ec6977b5fc77a277146a2b4c1493efa05f5bd5570da0437d7c709c716a7ec0be10856b012e1c2751fe530d4fd96e6b60aac4a6aa095b4cf050d37b89f61097b087bdc3e9627977aad73cf56b6c5c0dd34fcc1e87ec3134d448023367f1dd9e9b3273421f90ff4e96f0ce53b24394cd6244a246025218982ec8a55c4d5c132a877066bed4c67c66a84b8769126991fcec2c4a98ae0b70710d0c3e9af0f109023f6a8c1d251554625a759033fd93df6300bb430bbc816246ee06f68937c9864036bcf1a890eae650bc172731abd0ae91e058f6d15a36cb8b2396ae0c4688e11a71d8471cc757eaf555ce0c59f27fc07d388d91716b05f183a780cdcfc2d1f8ca4f3c30f073226d37cd755b2a0779870a1f8977a9ef7f072483382cee884c5025495d87ac24b6b725a950dfc10be58d225c782cbdb004d301d7927c33c4abb5484f7990266dba093e9bf7c3dbc7f1776eb57ec917e0e8c31df39231d1b3c6b7ffd9596f095eeaf77658a1f20c7e6a9338eabe052172aa977cd30c5a2adc08aefc8a4b6bd9710c3b283ca1ed97816ffb52aec2c012103fa7f3a1776c547f3038c92d96976e5cd5a30c713323b483c22a79d4341b7c26a4ddd63343b9ba97af7f1f0e7d1f6a94bfe98e5bceba5535457a87867548309640b6089f714b1170bda76578d0e3d56ef7b71b7516f298bd24c5d57e57b62e8c0c2b977c6ad11e0500e91229ae4cfd18007ef8d0f79759e745c5783c4bdd665a2ee54ee8aada52b8122de839f5e076f65a5d7eaf5229f5da52d63455d79ec045dd783d69b0d2bfd4c0a5dc553b52c6c5b2918c8b6ae81948be742beaa2d47a29fe9941efce79cf18f3aa2e5b1ee68f14689b3a225dbd7df647a6685f352eb606ff2e74e2d93e6366ed3b41496029165f8ec1e97b2609aa044a640fa74ee215d2dc492b79001d779da1f7abda5c96b97499a742cade7cd7b0cb3e1c18e9a52f5a9e0a874483668ba65160c5bc47762b1d25e364d701a77bfe3c7ce153b0c321bcad580856f11af7a1587001f7fd341d0702b75e5416ea5d7b12ba8381c37991d0df78c417a3b1e399b626f53ffa74eb43d06e760d1c9edeb1e473f9dd7cba097e7a576cffc770df137d95fc353df46e41308f91661fec763356b41e4130c74aadb1e581154d5e607ebb7d481c9ce4562830d2ddfb661ac52f954dee59f6bccddcb746490d493aaafb4178c3682ba347ac972656b73ae881389ffdc9b7c2c8c5fe1b8d1e725f3c45ca567cffb5d6d1436cce14c7d5c29a4a48e41f97c9762de91b2290a98be769de55b992b38937755fcfec0ae5133cebd5690500ad2aa37487a237a79ad50cb0209e68cb176577f2f41a52046329468fe4f6398a5b83c178f8c5a4a2c671313c7374ad38f72ccf8a342de7d584aa3488ac57acab1ed4c81f445caef658d5c07b599db3ebe81a1921d66783ebf9f74b6835b5b43ffb394b769b9011b6a1c9b6c7268e30f38266ecd75eb967f8a33bba2cb6149df51c717d7e8abef7491f12a1215d33dacc2cef3506363264dd6a9807d60b953490ebafd2cb706243c85f38cc842fd618b7778ca6e3c4de5ba02740a49311f0b0c9b51f3581fd7681e61f01919d90a3667837bf9839bf205b9a3c609c451698909ac2c744a72720e4fb7e88a8726f0afeb074c32c3ce3abbcaf1c146400b29cd9e57d665db1af4e692deaa39cfbf4c913335bcc012288e03d71d9f8928aa67844d12a4c942e09e338d6f73c57a9f6d2318ad3bbacd7c887879e1dfc7adb30bde8bcd0461ed56d0077134e94c7ac265e5f58856b6b8193de03f1c12742982c24dbcff4d1cf488c64720b307d6dc71e871679ec42bf6693c183769da37132c562fb1247433a0e840c01704f9446a1de0e84affd19a59a859d66559d360d0eac6fee5e4de058c6e715bb28f50e59eb6fc1cc39c0e614be0f50c0c9c56bd7ab46045a0284e446a0624f25c8afeec173b68f86acfee313a3d33df6234c2eee07c0f75774c96886d2e77115dcaf89cf0cb3d205e8a76fbbaacf5803b2f6e4a37da20458dd1a6b8ffa09aaf1f5bc654f1efc04059d4d9909a55e4674cfe5259c2e3484b6dceb2e84d710a47d5be42924d844fce53486f12de79ad80800bcb9c6a1f2dae1c95449e995f2eb18311a05565920ea409c3617bb7ea5491b5c367b809d152b5f0c7328efe333db859ec6cdd7633694fff3357cc4c352ee78d534770d42cd580171fdbdcbb83c386449f7cedfe4a7629bf24f06cd6e3c7bd1962a842cf2f97ab9a374c538f9e73483bf2b5da1569c604bc67867123f2e6af1a51030768fa123f1c7731c5cb04e110772938c330e397707dc7961bba569ca47c8f45a1b77985484a32e6c61ae52ca770535ed504b4b9bb38463fe7ebd154c4e7074b75fda91f862f1988a2b2c0d131052fbc378c343bacbc069c14f54c8554b19365108511fbccdcabc832b071bd02c83c176b33cc1ab0cee8c736844076c4ea9cc807e3b70d597b80bcba845188fd38699553c35acf19b669c8076dd31bf9a34458e1618e5facfcdf283c96acd0e77060fc3777556285ebac8844b78c3714d6f9769488ddb7b661a3fd9aadeb69bb560018c20f424fee2e52daa85843fc3d68236629a00a2902f6c386dec3a7ea38f103ae230434158d34f1ed056ccd7eb2654e66df5cd8b7830409847afae93a07632227e078516b79dee1a2282e071d197951604bef86124894f1fa3704fa17b4a876d3b0bf9862cf471ccd"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000004940)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000004980)) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000049c0), 0x4680, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000004a00)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async, rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000004a40)) (async, rerun: 64) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000004a80)=""/228) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000004c80)={0xcf, &(0x7f0000004b80)="b981d670c3917a131ce5c2babe1bbfa1cf549e95d6b6c2d30cd3198bc318d8ac0afed1b6db135a6be9c6229d82e13df06b8372f1730887f57f4f0979ccbcaeaf33c5583e3dc81739a0fb59bcb7f457ea0554677fec38a986d89fd12cdd12c627b6b65bd6d0b028d1c75aaa93fc0c4ed18399b9bd5dabf28e61b8f53e5f9666b0d26c855ed11bcbb7311651b8a2e05744fd06946f5cdfe1bcf784b61ec99886cf700726896fbe3c0c4759583f55e43f39e259540346d965b84407071f1d19825cf7a36b26055db8bebc70255137f7d0"}) (async) ioctl$KDSETLED(r0, 0x4b32, 0x401) r7 = syz_open_dev$hidraw(&(0x7f0000004cc0), 0xa, 0xa44d1f2e48a82fc5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000004d00)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000004e80)={0x0, &(0x7f0000004dc0)=""/166}) (rerun: 32) 16.136674495s ago: executing program 1 (id=2747): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x7}) (async) r5 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x5, 0xcec, 0x31324d59, 0x0, 0x7ff, 0xd580, 0xd, 0x4, 0x0, 0x8, 0x2, 0x4}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, r0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async) write(r2, &(0x7f0000001c80)="b1", 0x1) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002d00)='/sys/power/resume', 0x40680, 0x1b2) read$FUSE(r9, &(0x7f0000002e40)={0x2020}, 0x2020) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r8, &(0x7f0000000780), 0x0, 0x1, 0x10) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xa5166000) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 15.758664609s ago: executing program 1 (id=2748): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 15.571529637s ago: executing program 3 (id=2749): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000300)={&(0x7f0000000200)=[0x0], &(0x7f00000000c0), 0x1, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=[r1], &(0x7f0000000180)=[0x1], &(0x7f00000000c0)=[r2], &(0x7f00000001c0)}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r3, 0x5bf2b000) 15.324647747s ago: executing program 3 (id=2750): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1d}}}, 0xa0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000280)={0x3, 0x5}) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, r3}}, 0x18) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000001340)=0x3, r8, 0x0, 0x0, 0x1}}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 15.1223061s ago: executing program 1 (id=2751): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/86, 0x0, 0x10000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af10, &(0x7f0000000540)) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x210002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x5}) read(r2, &(0x7f0000000380)=""/152, 0x98) (async, rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0xc555da70b7d17bd2, 0xfffffff9}) (rerun: 32) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) (async) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)=0xb) (async) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) (async) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async) syz_open_dev$sg(&(0x7f0000000000), 0x419c, 0x36301) 14.101236922s ago: executing program 33 (id=2650): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) read$FUSE(r2, 0x0, 0x0) mmap(&(0x7f0000533000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f00000b4000/0x2000)=nil, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x5a1bc000) 1.062659599s ago: executing program 34 (id=2746): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x115000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x101, 0xc}) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000020c0)=0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000002100)={0x0, @adiantum, 0x0, @desc3}) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000002140)) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000022c0)={&(0x7f00000021c0)=""/199, 0xc7}) (async) preadv(r0, &(0x7f0000002300), 0x0, 0x8001, 0x9) r2 = dup(r0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000002340)) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000002380)={{r2}, 0x80, 0xa429, 0x23b}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000002480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (rerun: 64) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002880)={{r2}, r1, 0x8, @inherit={0x88, &(0x7f00000023c0)={0x0, 0x8, 0x2, 0x7, {0x1, 0x4, 0x5, 0x4, 0x8}, [0x8, 0x0, 0x2, 0x176, 0x1, 0x6, 0x4, 0x4b8d588c]}}, @devid=r3}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000003880)) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000038c0)) (async, rerun: 64) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000003900), 0x2, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000003940)={{r0}, "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"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000004940)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000004980)) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000049c0), 0x4680, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000004a00)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async, rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000004a40)) (async, rerun: 64) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000004a80)=""/228) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000004c80)={0xcf, &(0x7f0000004b80)="b981d670c3917a131ce5c2babe1bbfa1cf549e95d6b6c2d30cd3198bc318d8ac0afed1b6db135a6be9c6229d82e13df06b8372f1730887f57f4f0979ccbcaeaf33c5583e3dc81739a0fb59bcb7f457ea0554677fec38a986d89fd12cdd12c627b6b65bd6d0b028d1c75aaa93fc0c4ed18399b9bd5dabf28e61b8f53e5f9666b0d26c855ed11bcbb7311651b8a2e05744fd06946f5cdfe1bcf784b61ec99886cf700726896fbe3c0c4759583f55e43f39e259540346d965b84407071f1d19825cf7a36b26055db8bebc70255137f7d0"}) (async) ioctl$KDSETLED(r0, 0x4b32, 0x401) r7 = syz_open_dev$hidraw(&(0x7f0000004cc0), 0xa, 0xa44d1f2e48a82fc5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000004d00)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000004e80)={0x0, &(0x7f0000004dc0)=""/166}) (rerun: 32) 33.397824ms ago: executing program 35 (id=2751): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/86, 0x0, 0x10000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af10, &(0x7f0000000540)) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x210002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x5}) read(r2, &(0x7f0000000380)=""/152, 0x98) (async, rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0xc555da70b7d17bd2, 0xfffffff9}) (rerun: 32) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) (async) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000000)=0xb) (async) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) (async) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async) syz_open_dev$sg(&(0x7f0000000000), 0x419c, 0x36301) 0s ago: executing program 36 (id=2750): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1d}}}, 0xa0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000280)={0x3, 0x5}) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, r3}}, 0x18) r4 = dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000001340)=0x3, r8, 0x0, 0x0, 0x1}}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 73.981232][ T5824] cgroup: Unknown subsys name 'net' [ 74.138769][ T5824] cgroup: Unknown subsys name 'cpuset' [ 74.147462][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.638870][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.136092][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.143794][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.149045][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.152274][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.159007][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.166455][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.172887][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.180718][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.193799][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.193948][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.201400][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.209073][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.216228][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.222382][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.237588][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.245625][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.252978][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.261481][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.277109][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.285280][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.699780][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.826848][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.941503][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.949102][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.956718][ T5834] bridge_slave_0: entered allmulticast mode [ 78.963729][ T5834] bridge_slave_0: entered promiscuous mode [ 78.985033][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.007127][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.014250][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.021711][ T5834] bridge_slave_1: entered allmulticast mode [ 79.028928][ T5834] bridge_slave_1: entered promiscuous mode [ 79.048572][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 79.109264][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.153663][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.163093][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.171216][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.178490][ T5835] bridge_slave_0: entered allmulticast mode [ 79.185892][ T5835] bridge_slave_0: entered promiscuous mode [ 79.217042][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.224216][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.231671][ T5835] bridge_slave_1: entered allmulticast mode [ 79.238990][ T5835] bridge_slave_1: entered promiscuous mode [ 79.318417][ T5834] team0: Port device team_slave_0 added [ 79.327822][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.339225][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.346711][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.353830][ T5833] bridge_slave_0: entered allmulticast mode [ 79.361475][ T5833] bridge_slave_0: entered promiscuous mode [ 79.382513][ T5834] team0: Port device team_slave_1 added [ 79.390516][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.400194][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.407447][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.414565][ T5833] bridge_slave_1: entered allmulticast mode [ 79.421986][ T5833] bridge_slave_1: entered promiscuous mode [ 79.481176][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.488457][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.496078][ T5836] bridge_slave_0: entered allmulticast mode [ 79.503329][ T5836] bridge_slave_0: entered promiscuous mode [ 79.545708][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.552875][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.560097][ T5836] bridge_slave_1: entered allmulticast mode [ 79.568157][ T5836] bridge_slave_1: entered promiscuous mode [ 79.576671][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.583627][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.612395][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.628084][ T5835] team0: Port device team_slave_0 added [ 79.636778][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.648224][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.669394][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.677090][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.703756][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.717594][ T5835] team0: Port device team_slave_1 added [ 79.785883][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.813484][ T5833] team0: Port device team_slave_0 added [ 79.821770][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.848171][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.855150][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.881575][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.894807][ T5833] team0: Port device team_slave_1 added [ 79.925019][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.932220][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.958670][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.998768][ T5834] hsr_slave_0: entered promiscuous mode [ 80.005615][ T5834] hsr_slave_1: entered promiscuous mode [ 80.033989][ T5836] team0: Port device team_slave_0 added [ 80.042743][ T5836] team0: Port device team_slave_1 added [ 80.062493][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.069692][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.096066][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.139688][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.146779][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.173629][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.216096][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.223054][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.249275][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.261685][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.269133][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.295100][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.316250][ T5844] Bluetooth: hci3: command tx timeout [ 80.322120][ T5844] Bluetooth: hci2: command tx timeout [ 80.327683][ T51] Bluetooth: hci1: command tx timeout [ 80.331549][ T5844] Bluetooth: hci0: command tx timeout [ 80.358661][ T5835] hsr_slave_0: entered promiscuous mode [ 80.364925][ T5835] hsr_slave_1: entered promiscuous mode [ 80.371434][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.379215][ T5835] Cannot create hsr debugfs directory [ 80.453447][ T5833] hsr_slave_0: entered promiscuous mode [ 80.459908][ T5833] hsr_slave_1: entered promiscuous mode [ 80.466365][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.473929][ T5833] Cannot create hsr debugfs directory [ 80.496908][ T5836] hsr_slave_0: entered promiscuous mode [ 80.503553][ T5836] hsr_slave_1: entered promiscuous mode [ 80.509743][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.517372][ T5836] Cannot create hsr debugfs directory [ 80.858806][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.891509][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.918357][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.934520][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.992580][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.016074][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.028950][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.039468][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.110248][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.130588][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.157748][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.182153][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.247112][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.269834][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.288925][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.310848][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.347625][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.430548][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.446602][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.453985][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.484456][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.504880][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.512095][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.535324][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.556912][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.581031][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.588187][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.612787][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.624076][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.631203][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.660419][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.683761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.690912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.701863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.708976][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.736927][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.781144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.788338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.806902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.814024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.083815][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.199389][ T5834] veth0_vlan: entered promiscuous mode [ 82.229773][ T5834] veth1_vlan: entered promiscuous mode [ 82.314230][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.338232][ T5834] veth0_macvtap: entered promiscuous mode [ 82.364208][ T5834] veth1_macvtap: entered promiscuous mode [ 82.396496][ T5844] Bluetooth: hci1: command tx timeout [ 82.396559][ T5157] Bluetooth: hci2: command tx timeout [ 82.401912][ T5844] Bluetooth: hci3: command tx timeout [ 82.407329][ T51] Bluetooth: hci0: command tx timeout [ 82.430259][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.443498][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.469959][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.482723][ T5836] veth0_vlan: entered promiscuous mode [ 82.499374][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.510162][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.520255][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.529036][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.550704][ T5836] veth1_vlan: entered promiscuous mode [ 82.563722][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.640330][ T5836] veth0_macvtap: entered promiscuous mode [ 82.663087][ T5835] veth0_vlan: entered promiscuous mode [ 82.683565][ T5836] veth1_macvtap: entered promiscuous mode [ 82.714964][ T5835] veth1_vlan: entered promiscuous mode [ 82.742739][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.768002][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.770327][ T5833] veth0_vlan: entered promiscuous mode [ 82.799458][ T5835] veth0_macvtap: entered promiscuous mode [ 82.811992][ T5833] veth1_vlan: entered promiscuous mode [ 82.831260][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.854954][ T5835] veth1_macvtap: entered promiscuous mode [ 82.865141][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.890094][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.901004][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.902664][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.917478][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.928292][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.937288][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.968508][ T5833] veth0_macvtap: entered promiscuous mode [ 82.986840][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.009758][ T5833] veth1_macvtap: entered promiscuous mode [ 83.039110][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.074637][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.100087][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.112317][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.122055][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.131342][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140378][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.176478][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.224004][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.236150][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244883][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253970][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280071][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.310532][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.384561][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.395081][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.496534][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.505286][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.599179][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.622627][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.712178][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.721442][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.732687][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.761640][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.207606][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.477687][ T5844] Bluetooth: hci3: command tx timeout [ 84.483167][ T5844] Bluetooth: hci2: command tx timeout [ 84.489290][ T5847] Bluetooth: hci0: command tx timeout [ 84.494946][ T5157] Bluetooth: hci1: command tx timeout [ 84.559693][ T5948] sp0: Synchronizing with TNC [ 84.645191][ T5943] [U] [ 86.204143][ T6017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.244277][ T6017] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 86.331606][ T6017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.349852][ T6017] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 86.393452][ T6017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.406123][ T6017] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 86.496785][ T6017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.502727][ T6017] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 86.557561][ T5844] Bluetooth: hci2: command tx timeout [ 86.751697][ T6031] loop4: detected capacity change from 0 to 524255231 [ 87.329527][ T6046] input: syz0 as /devices/virtual/input/input6 [ 89.828678][ T6120] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.248025][ T6131] input: syz1 as /devices/virtual/input/input7 [ 91.688808][ T43] cfg80211: failed to load regulatory.db [ 92.159713][ T30] audit: type=1400 audit(1750383202.547:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6182 comm="syz.3.56" [ 92.271505][ T6194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.727178][ T6211] input: syz1 as /devices/virtual/input/input8 [ 92.756887][ T6211] kvm: user requested TSC rate below hardware speed [ 93.402962][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.264240][ T6263] mkiss: ax0: crc mode is auto. [ 94.783187][ T6276] input: syz1 as /devices/virtual/input/input9 [ 95.431170][ T6290] CUSE: DEVNAME unspecified [ 96.014574][ T6298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.249229][ T6310] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 96.531173][ T6323] deleting an unspecified loop device is not supported. [ 97.231150][ T6348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.100229][ T6377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.852536][ T6411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.876165][ T6408] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 99.245302][ T6419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.542261][ T6461] kvm: user requested TSC rate below hardware speed [ 100.581614][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.617351][ T6464] binder: 6458:6464 ioctl c018620c 200000000140 returned -1 [ 100.899002][ T6478] vivid-000: disconnect [ 100.920266][ T6475] vivid-000: reconnect [ 102.144965][ T6523] binder: 6522:6523 ioctl c00c6211 0 returned -14 [ 102.588829][ T6550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.636767][ T6550] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 104.148476][ T6587] loop6: detected capacity change from 0 to 524287999 [ 104.192062][ T6243] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 104.433377][ T1346] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.455706][ T1346] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.671779][ T6614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.874420][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.058877][ T6659] binder: 6657:6659 ioctl 4018620d 0 returned -22 [ 106.475529][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.773961][ T6675] usb usb1: usbfs: process 6675 (syz.1.181) did not claim interface 0 before use [ 107.707136][ T6706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.441605][ T6769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.565371][ T6811] input: syz1 as /devices/virtual/input/input14 [ 111.352569][ T6836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.511640][ T6844] usb usb8: usbfs: process 6844 (syz.0.234) did not claim interface 0 before use [ 111.632109][ T6851] usb usb8: usbfs: process 6851 (syz.0.234) did not claim interface 0 before use [ 113.334003][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.946951][ T6992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.647494][ T7080] program syz.0.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.238704][ T7098] block device autoloading is deprecated and will be removed. [ 118.251485][ T7098] syz.2.301: attempt to access beyond end of device [ 118.251485][ T7098] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 119.034716][ T7120] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 119.680893][ T7140] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.762750][ T7142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=64875003 (129750006 ns) > initial count (53591314 ns). Using initial count to start timer. [ 120.666310][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.087367][ T7185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.451549][ T7203] input: syz1 as /devices/virtual/input/input16 [ 122.028943][ T7210] mkiss: ax0: crc mode is auto. [ 122.481235][ T7226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.694570][ T7239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.903911][ T7249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.934445][ T7239] loop6: detected capacity change from 0 to 4 [ 122.942202][ T7249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.137958][ T7289] QAT: failed to copy from user cfg_data. [ 124.416940][ T7301] block nbd0: NBD_DISCONNECT [ 124.879358][ T7315] input: syz1 as /devices/virtual/input/input17 [ 127.518003][ T7403] can0: slcan on ttyS3. [ 127.640250][ T7403] can0 (unregistered): slcan off ttyS3. [ 128.033970][ T7418] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.402' sets config #-1 [ 128.763131][ T7436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.009542][ T7441] syz.3.409 (7441) used obsolete PPPIOCDETACH ioctl [ 129.964759][ T7481] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 130.435036][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.476271][ T30] audit: type=1800 audit(1750383242.867:3): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.439" name="dmabuf" dev="dmabuf" ino=1 res=0 errno=0 [ 132.485828][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.497153][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 132.655996][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.663290][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.696856][ T7566] vivid-000: ================= START STATUS ================= [ 133.704909][ T7566] vivid-000: Generate PTS: true [ 133.710860][ T7566] vivid-000: Generate SCR: true [ 133.716477][ T7566] tpg source WxH: 320x180 (R'G'B) [ 133.721538][ T7566] tpg field: 1 [ 133.731992][ T7566] tpg crop: (0,0)/320x180 [ 133.736452][ T7566] tpg compose: (0,0)/320x180 [ 133.741072][ T7566] tpg colorspace: 6 [ 133.744982][ T7566] tpg transfer function: 0/0 [ 133.750281][ T7566] tpg quantization: 0/0 [ 133.754473][ T7566] tpg RGB range: 0/2 [ 133.758630][ T7566] vivid-000: ================== END STATUS ================== [ 134.797075][ T5847] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 134.800117][ T5157] Bluetooth: hci4: command 0xfc11 tx timeout [ 135.115492][ T5847] Bluetooth: hci5: command 0x1003 tx timeout [ 135.122246][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.129724][ T7606] CUSE: info not properly terminated [ 135.575447][ T7622] binder: 7621:7622 ioctl 4018620d 0 returned -22 [ 135.763769][ T7633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.099324][ T7646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.149403][ T30] audit: type=1400 audit(1750383246.547:4): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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mixer_oss: invalid OSS volume '(' [ 136.840675][ T7667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.849659][ T7667] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 137.150577][ T7683] autofs4:pid:7683:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 137.166383][ T7683] autofs4:pid:7683:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 137.819613][ T7705] qrtr: Invalid version 0 [ 137.920726][ T7707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.462174][ T7726] FAULT_INJECTION: forcing a failure. [ 138.462174][ T7726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.517215][ T7728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.524153][ T7726] CPU: 1 UID: 0 PID: 7726 Comm: syz.2.501 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 138.524179][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.524198][ T7726] Call Trace: [ 138.524210][ T7726] [ 138.524218][ T7726] dump_stack_lvl+0x189/0x250 [ 138.524258][ T7726] ? __pfx____ratelimit+0x10/0x10 [ 138.524292][ T7726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.524316][ T7726] ? __pfx__printk+0x10/0x10 [ 138.524353][ T7726] should_fail_ex+0x414/0x560 [ 138.524385][ T7726] _copy_to_user+0x31/0xb0 [ 138.524408][ T7726] simple_read_from_buffer+0xe1/0x170 [ 138.524444][ T7726] proc_fail_nth_read+0x1df/0x250 [ 138.524467][ T7726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.524491][ T7726] ? rw_verify_area+0x258/0x650 [ 138.524516][ T7726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.524537][ T7726] vfs_read+0x1fd/0x980 [ 138.524568][ T7726] ? __pfx___mutex_lock+0x10/0x10 [ 138.524590][ T7726] ? __pfx_vfs_read+0x10/0x10 [ 138.524617][ T7726] ? __fget_files+0x2a/0x420 [ 138.524653][ T7726] ? __fget_files+0x3a0/0x420 [ 138.524682][ T7726] ? __fget_files+0x2a/0x420 [ 138.524722][ T7726] ksys_read+0x145/0x250 [ 138.524751][ T7726] ? __pfx_ksys_read+0x10/0x10 [ 138.524783][ T7726] ? do_syscall_64+0xbe/0x3b0 [ 138.524807][ T7726] do_syscall_64+0xfa/0x3b0 [ 138.524825][ T7726] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.524856][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.524876][ T7726] ? clear_bhb_loop+0x60/0xb0 [ 138.524901][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.524920][ T7726] RIP: 0033:0x7fd5bdd8d33c [ 138.524943][ T7726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.524959][ T7726] RSP: 002b:00007fd5bec3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.524980][ T7726] RAX: ffffffffffffffda RBX: 00007fd5bdfb5fa0 RCX: 00007fd5bdd8d33c [ 138.524995][ T7726] RDX: 000000000000000f RSI: 00007fd5bec3f0a0 RDI: 0000000000000005 [ 138.525007][ T7726] RBP: 00007fd5bec3f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.525019][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.525031][ T7726] R13: 0000000000000000 R14: 00007fd5bdfb5fa0 R15: 00007ffdac824328 [ 138.525063][ T7726] [ 139.333089][ T7744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.811717][ T7816] syz.3.532: attempt to access beyond end of device [ 141.811717][ T7816] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 141.989697][ T7821] input: syz0 as /devices/virtual/input/input22 [ 142.404777][ T7832] syz.2.538: attempt to access beyond end of device [ 142.404777][ T7832] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.468098][ T7836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.363686][ T7870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.443444][ T7876] usb usb1: usbfs: process 7876 (syz.3.550) did not claim interface 0 before use [ 143.576486][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.593618][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.619772][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.635446][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.650132][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.667937][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.688680][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.706043][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.723807][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.743867][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.762088][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.830814][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.858930][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.885376][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.895658][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.903068][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.935375][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.942786][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.975399][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.982827][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.015410][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.022823][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.053013][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.065611][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.073018][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.080788][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.088390][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.100252][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.135907][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.143983][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.158378][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.169583][ T5970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 144.179798][ T7886] input: syz0 as /devices/virtual/input/input23 [ 144.187845][ T5970] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.330375][ T7892] kvm: kvm [7891]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 144.428308][ T7893] fido_id[7893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.583880][ T7938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.823362][ T7948] QAT: failed to copy from user cfg_data. [ 146.867481][ T7977] input: syz1 as /devices/virtual/input/input24 [ 146.886049][ T7979] binder: 7978:7979 ioctl 40046210 ffffffffffffffff returned -14 [ 147.200018][ T7991] input: syz1 as /devices/virtual/input/input25 [ 147.669447][ T8004] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 147.754088][ T8005] QAT: Device 5 not found [ 148.110766][ T8014] CUSE: info not properly terminated [ 149.289388][ T8039] usb usb8: usbfs: process 8039 (syz.3.603) did not claim interface 0 before use [ 149.711694][ T8053] binder: 8049:8053 ioctl c0306201 200000000300 returned -22 [ 150.275937][ T8066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.711778][ T8080] dlm: no locking on control device [ 151.218801][ T8096] CUSE: info not properly terminated [ 152.335385][ T8120] kvm_intel: kvm [8118]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 152.441185][ T8123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.281374][ T8205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.714550][ T8226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.121377][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.574873][ T8275] binder: 8274:8275 ioctl 40046205 0 returned -22 [ 157.220259][ T8297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.288344][ T8296] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 160.193023][ T8409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.205252][ T8408] [U] ^R [ 160.892675][ T8419] binder: 8418:8419 ioctl c0306201 2000000003c0 returned -14 [ 161.062269][ T8427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.620937][ T8443] program syz.1.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.001820][ T8456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.294570][ T8468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.029027][ T8489] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.087437][ T12] Bluetooth: hci4: Frame reassembly failed (-90) [ 163.205191][ T8485] ALSA: seq fatal error: cannot create timer (-22) [ 163.417574][ T8506] program syz.2.739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.455801][ T8499] nvme_fabrics: missing parameter 'transport=%s' [ 163.462367][ T8499] nvme_fabrics: missing parameter 'nqn=%s' [ 163.473141][ T8506] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 163.831192][ T8516] dlm: non-version read from control device 2 [ 163.842064][ T8516] dlm: non-version read from control device 2 [ 163.853072][ T8516] dlm: non-version read from control device 2 [ 163.859366][ T8516] dlm: non-version read from control device 2 [ 163.865628][ T8516] dlm: non-version read from control device 2 [ 163.871730][ T8516] dlm: non-version read from control device 2 [ 163.878329][ T8516] dlm: non-version read from control device 2 [ 163.884522][ T8516] dlm: non-version read from control device 2 [ 163.891077][ T8516] dlm: non-version read from control device 2 [ 163.921776][ T8516] dlm: non-version read from control device 2 [ 163.928929][ T8516] dlm: non-version read from control device 2 [ 163.935141][ T8516] dlm: non-version read from control device 2 [ 163.946907][ T8516] dlm: non-version read from control device 2 [ 163.953070][ T8516] dlm: non-version read from control device 2 [ 163.961345][ T8516] dlm: non-version read from control device 2 [ 163.980363][ T8516] dlm: non-version read from control device 2 [ 163.987693][ T8516] dlm: non-version read from control device 2 [ 163.993945][ T8516] dlm: non-version read from control device 2 [ 164.004974][ T8516] dlm: non-version read from control device 2 [ 164.033334][ T8516] dlm: non-version read from control device 2 [ 164.055403][ T8516] dlm: non-version read from control device 2 [ 164.062243][ T8516] dlm: non-version read from control device 2 [ 164.074696][ T8516] dlm: non-version read from control device 2 [ 164.089873][ T8516] dlm: non-version read from control device 2 [ 164.096255][ T8516] dlm: non-version read from control device 2 [ 164.102447][ T8516] dlm: non-version read from control device 2 [ 164.109028][ T8516] dlm: non-version read from control device 2 [ 164.115224][ T8516] dlm: non-version read from control device 2 [ 164.123964][ T8516] dlm: non-version read from control device 2 [ 164.130526][ T8516] dlm: non-version read from control device 2 [ 164.139626][ T8516] dlm: non-version read from control device 2 [ 164.146440][ T8516] dlm: non-version read from control device 2 [ 164.152653][ T8516] dlm: non-version read from control device 2 [ 164.164603][ T8527] CUSE: info not properly terminated [ 164.171016][ T8516] dlm: non-version read from control device 2 [ 164.180030][ T8516] dlm: non-version read from control device 2 [ 164.186409][ T8516] dlm: non-version read from control device 2 [ 164.192547][ T8516] dlm: non-version read from control device 2 [ 164.199776][ T8524] CUSE: info not properly terminated [ 164.201942][ T8516] dlm: non-version read from control device 2 [ 164.211713][ T8516] dlm: non-version read from control device 2 [ 164.220775][ T8516] dlm: non-version read from control device 2 [ 164.227173][ T8516] dlm: non-version read from control device 2 [ 164.233324][ T8516] dlm: non-version read from control device 2 [ 164.239978][ T8516] dlm: non-version read from control device 2 [ 164.246373][ T8516] dlm: non-version read from control device 2 [ 164.252535][ T8516] dlm: non-version read from control device 2 [ 164.258990][ T8516] dlm: non-version read from control device 2 [ 164.265176][ T8516] dlm: non-version read from control device 2 [ 164.271697][ T8516] dlm: non-version read from control device 2 [ 164.278070][ T8516] dlm: non-version read from control device 2 [ 164.284233][ T8516] dlm: non-version read from control device 2 [ 164.290736][ T8516] dlm: non-version read from control device 2 [ 164.297130][ T8516] dlm: non-version read from control device 2 [ 164.303277][ T8516] dlm: non-version read from control device 2 [ 164.323557][ T8516] dlm: non-version read from control device 2 [ 164.329963][ T8516] dlm: non-version read from control device 2 [ 164.339879][ T8516] dlm: non-version read from control device 2 [ 164.347009][ T8516] dlm: non-version read from control device 2 [ 164.353190][ T8516] dlm: non-version read from control device 2 [ 164.383008][ T8516] dlm: non-version read from control device 2 [ 164.393115][ T8516] dlm: non-version read from control device 2 [ 164.401590][ T8516] dlm: non-version read from control device 2 [ 164.410953][ T8516] dlm: non-version read from control device 2 [ 164.418278][ T8516] dlm: non-version read from control device 2 [ 164.429559][ T8516] dlm: non-version read from control device 2 [ 164.439659][ T8516] dlm: non-version read from control device 2 [ 165.018004][ T8558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.048776][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.181660][ T8564] loop6: detected capacity change from 0 to 524287999 [ 165.191212][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.203084][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.213719][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.225670][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.233641][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.265699][ T8565] Invalid logical block size (5) [ 165.272218][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.286832][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.315204][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.336369][ T8564] ldm_validate_partition_table(): Disk read failed. [ 165.343041][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.355654][ T8564] Buffer I/O error on dev loop6, logical block 0, async page read [ 165.363819][ T8564] Dev loop6: unable to read RDB block 0 [ 165.389665][ T8564] loop6: unable to read partition table [ 165.395802][ T8564] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 165.587344][ T8571] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 166.323188][ T8597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.219543][ T8622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.006956][ T8663] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 168.029666][ T8663] binder: 8660:8663 ioctl c0306201 200000000100 returned -22 [ 168.063132][ T8667] syz.3.786: attempt to access beyond end of device [ 168.063132][ T8667] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 169.168026][ T8702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.230936][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.168787][ T8760] usb usb9: usbfs: process 8760 (syz.0.813) did not claim interface 0 before use [ 172.715735][ T8780] binder: BINDER_SET_CONTEXT_MGR already set [ 172.735583][ T8780] binder: 8778:8780 ioctl 4018620d 2000000001c0 returned -16 [ 172.752790][ T8780] binder: BINDER_SET_CONTEXT_MGR already set [ 172.775589][ T8780] binder: 8778:8780 ioctl 40046207 0 returned -16 [ 172.852134][ T8785] usb usb8: usbfs: process 8785 (syz.3.821) did not claim interface 0 before use [ 173.453261][ T8799] QAT: failed to copy from user. [ 174.030945][ T8808] input: syz1 as /devices/virtual/input/input34 [ 174.560076][ T8829] tap0: tun_chr_ioctl cmd 1074025672 [ 174.565780][ T8829] tap0: ignored: set checksum enabled [ 174.782193][ T8835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.824602][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.407595][ T8848] qrtr: Invalid version 0 [ 175.649959][ T30] audit: type=1400 audit(1750383286.047:5): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8854 comm="syz.3.843" [ 176.875411][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 176.875706][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.253342][ T8896] binder: 8894:8896 ioctl c00c620f 0 returned -14 [ 178.256835][ T8914] kvm: user requested TSC rate below hardware speed [ 178.636599][ T8923] cgroup: fork rejected by pids controller in /syz3 [ 179.514909][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.627792][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.736948][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.032013][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.059226][ T8954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.412452][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.423071][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.435589][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.453771][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.464173][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.488969][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.520205][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.535396][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.546856][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.555631][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.694861][ T12] bridge_slave_1: left allmulticast mode [ 180.757583][ T12] bridge_slave_1: left promiscuous mode [ 180.763566][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.900104][ T12] bridge_slave_0: left allmulticast mode [ 180.907172][ T12] bridge_slave_0: left promiscuous mode [ 180.913529][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.340560][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.363011][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.385236][ T12] bond0 (unregistering): Released all slaves [ 181.812000][ T8979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.846252][ T8979] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 182.079176][ T12] hsr_slave_0: left promiscuous mode [ 182.125208][ T12] hsr_slave_1: left promiscuous mode [ 182.147990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.184620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.203719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.231754][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.272266][ T8996] autofs4:pid:8996:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 182.344117][ T12] veth1_macvtap: left promiscuous mode [ 182.386605][ T12] veth0_macvtap: left promiscuous mode [ 182.392293][ T12] veth1_vlan: left promiscuous mode [ 182.435825][ T12] veth0_vlan: left promiscuous mode [ 183.011318][ T12] team0 (unregistering): Port device team_slave_1 removed [ 183.049227][ T12] team0 (unregistering): Port device team_slave_0 removed [ 183.149891][ T9005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.208996][ T9006] input: syz1 as /devices/virtual/input/input35 [ 184.051242][ T8960] chnl_net:caif_netlink_parms(): no params data found [ 184.417798][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.425003][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.453006][ T8960] bridge_slave_0: entered allmulticast mode [ 184.478741][ T8960] bridge_slave_0: entered promiscuous mode [ 184.507855][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.524207][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.545252][ T8960] bridge_slave_1: entered allmulticast mode [ 184.578583][ T8960] bridge_slave_1: entered promiscuous mode [ 184.759772][ T8960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.795572][ T8960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.931715][ T9056] loop6: detected capacity change from 0 to 524287999 [ 184.967679][ T8960] team0: Port device team_slave_0 added [ 184.992384][ T8960] team0: Port device team_slave_1 added [ 185.089993][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.105723][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.131609][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.172305][ T8960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.215764][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.222725][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.248593][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.309726][ T8960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.777881][ T8960] hsr_slave_0: entered promiscuous mode [ 185.794758][ T8960] hsr_slave_1: entered promiscuous mode [ 185.804531][ T8960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.822558][ T8960] Cannot create hsr debugfs directory [ 186.554798][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.564006][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.574884][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.594254][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.602214][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.618404][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.642401][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.657502][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.675915][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.684489][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.824615][ T5834] syz-executor (5834) used greatest stack depth: 19720 bytes left [ 186.851365][ T1346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.092986][ T1346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.399481][ T1346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.495149][ T9119] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.583729][ T1346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.973573][ T8960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.043969][ T1346] bridge_slave_1: left allmulticast mode [ 188.053990][ T1346] bridge_slave_1: left promiscuous mode [ 188.059824][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.082787][ T1346] bridge_slave_0: left allmulticast mode [ 188.088615][ T1346] bridge_slave_0: left promiscuous mode [ 188.094406][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.352271][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.363087][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.373025][ T1346] bond0 (unregistering): Released all slaves [ 188.388561][ T8960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.432629][ T8960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.453107][ T8960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.634415][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 188.716083][ T5847] Bluetooth: hci1: command tx timeout [ 188.994199][ T1346] hsr_slave_0: left promiscuous mode [ 189.021809][ T1346] hsr_slave_1: left promiscuous mode [ 189.064452][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.093151][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.107913][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.127620][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.174374][ T1346] veth1_macvtap: left promiscuous mode [ 189.245437][ T1346] veth0_macvtap: left promiscuous mode [ 189.251097][ T1346] veth1_vlan: left promiscuous mode [ 189.259155][ T1346] veth0_vlan: left promiscuous mode [ 189.373387][ T9168] block nbd1: NBD_DISCONNECT [ 190.425974][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 190.499985][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 190.795615][ T5847] Bluetooth: hci1: command tx timeout [ 191.107640][ T9180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.113608][ T9180] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 191.199608][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.215684][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.222858][ T9091] bridge_slave_0: entered allmulticast mode [ 191.247271][ T9091] bridge_slave_0: entered promiscuous mode [ 191.274033][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.281659][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.292520][ T9091] bridge_slave_1: entered allmulticast mode [ 191.302052][ T9091] bridge_slave_1: entered promiscuous mode [ 191.460373][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.490675][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.779234][ T9091] team0: Port device team_slave_0 added [ 191.825007][ T8960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.841947][ T9091] team0: Port device team_slave_1 added [ 192.138575][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.151846][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.177784][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.210683][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.284917][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.308175][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.315186][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.341105][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.378080][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.409107][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.416302][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.475732][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.482860][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.722412][ T9091] hsr_slave_0: entered promiscuous mode [ 192.736276][ T9091] hsr_slave_1: entered promiscuous mode [ 193.204496][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.312093][ T9091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.341735][ T8960] veth0_vlan: entered promiscuous mode [ 193.369483][ T9091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.393014][ T8960] veth1_vlan: entered promiscuous mode [ 193.421758][ T9091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.451023][ T9091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.542572][ T8960] veth0_macvtap: entered promiscuous mode [ 193.578452][ T8960] veth1_macvtap: entered promiscuous mode [ 193.685137][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.729212][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.749227][ T8960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.785385][ T8960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.794215][ T8960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.845305][ T8960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.942471][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.077444][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.081213][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.093592][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.100791][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.108608][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.180650][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.187916][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.309734][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.342346][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.503642][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.521550][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.026110][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.688775][ T9091] veth0_vlan: entered promiscuous mode [ 195.723113][ T9091] veth1_vlan: entered promiscuous mode [ 195.795181][ T9091] veth0_macvtap: entered promiscuous mode [ 195.816513][ T9091] veth1_macvtap: entered promiscuous mode [ 195.856735][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.936269][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.986034][ T9091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.996305][ T9091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.005147][ T9091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.014494][ T9091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.491492][ T1346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.577210][ T9410] input: syz0 as /devices/virtual/input/input36 [ 197.827333][ T1346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.981987][ T9419] usb usb8: usbfs: process 9419 (syz.1.942) did not claim interface 0 before use [ 198.019819][ T1346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.282529][ T9429] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38416761, 8, 0, 0, 0) [ 198.392043][ T1346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.621838][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.630587][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.638910][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.657031][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.671192][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.701251][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.708742][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.716384][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.724326][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.746849][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.054716][ T1346] bridge_slave_1: left allmulticast mode [ 199.071239][ T1346] bridge_slave_1: left promiscuous mode [ 199.085205][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.117012][ T1346] bridge_slave_0: left allmulticast mode [ 199.122686][ T1346] bridge_slave_0: left promiscuous mode [ 199.152241][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.811454][ T9467] input: syz1 as /devices/virtual/input/input37 [ 200.057077][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.059474][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.061011][ T1346] bond0 (unregistering): Released all slaves [ 200.164500][ T9450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.164533][ T9450] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 200.271393][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.451952][ T1346] hsr_slave_0: left promiscuous mode [ 200.494137][ T1346] hsr_slave_1: left promiscuous mode [ 200.505979][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.513417][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.644231][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.651766][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.690682][ T1346] veth1_macvtap: left promiscuous mode [ 200.708316][ T1346] veth0_macvtap: left promiscuous mode [ 200.714533][ T1346] veth1_vlan: left promiscuous mode [ 200.720493][ T1346] veth0_vlan: left promiscuous mode [ 201.270033][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 201.301980][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 201.791301][ T9505] QAT: failed to copy from user. [ 201.807359][ T9505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.269327][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 202.356116][ T9515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.427326][ T9519] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 202.450581][ T9521] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 202.557631][ T9525] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.564181][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 202.731734][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.739298][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.746920][ T9433] bridge_slave_0: entered allmulticast mode [ 202.763934][ T9433] bridge_slave_0: entered promiscuous mode [ 202.778537][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.808859][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.835831][ T9433] bridge_slave_1: entered allmulticast mode [ 202.849604][ T9433] bridge_slave_1: entered promiscuous mode [ 202.977656][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.073910][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.188977][ T9433] team0: Port device team_slave_0 added [ 203.214566][ T9433] team0: Port device team_slave_1 added [ 203.294185][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.304403][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.361284][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.394657][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.412327][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.443748][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.625151][ T9433] hsr_slave_0: entered promiscuous mode [ 203.634524][ T9433] hsr_slave_1: entered promiscuous mode [ 204.493737][ T9433] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.523562][ T9433] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.555699][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.569852][ T9433] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.616602][ T9433] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.650371][ T9590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.899100][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.954847][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.024617][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.031807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.062568][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.069751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.632575][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.959752][ T9644] ALSA: seq fatal error: cannot create timer (-22) [ 205.991467][ T9650] loop4: detected capacity change from 0 to 524255231 [ 206.363963][ T9433] veth0_vlan: entered promiscuous mode [ 206.447884][ T9433] veth1_vlan: entered promiscuous mode [ 206.544634][ T9433] veth0_macvtap: entered promiscuous mode [ 206.593195][ T9433] veth1_macvtap: entered promiscuous mode [ 206.652759][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.687128][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.717501][ T9433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.746076][ T9433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.754898][ T9433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.774437][ T9433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.990643][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.046517][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.110361][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.122620][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.579379][ T9745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.594600][ T9744] Sensor A: ================= START STATUS ================= [ 208.602653][ T9745] Sensor A: ================= START STATUS ================= [ 208.610644][ T9745] Sensor A: Test Pattern: 75% Colorbar [ 208.617956][ T9745] Sensor A: Show Information: All [ 208.623106][ T9745] Sensor A: Vertical Flip: false [ 208.637615][ T9745] Sensor A: Horizontal Flip: false [ 208.644682][ T9745] Sensor A: Brightness: 255 [ 208.668269][ T9745] Sensor A: Contrast: 0 [ 208.683774][ T9745] Sensor A: Hue: 0 [ 208.696444][ T9745] Sensor A: Saturation: 128 [ 208.701035][ T9745] Sensor A: ================== END STATUS ================== [ 208.704798][ T9744] Sensor A: Test Pattern: [ 208.711140][ T9754] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 208.725774][ T9744] 75% Colorbar [ 208.729183][ T9744] Sensor A: Show Information: All [ 208.743992][ T9755] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 208.767789][ T9744] Sensor A: Vertical Flip: false [ 208.772783][ T9744] Sensor A: Horizontal Flip: false [ 208.803644][ T9744] Sensor A: Brightness: 255 [ 208.813785][ T9744] Sensor A: Contrast: 0 [ 208.823923][ T9744] Sensor A: Hue: 0 [ 208.830801][ T9744] Sensor A: Saturation: 128 [ 208.845416][ T9744] Sensor A: ================== END STATUS ================== [ 209.039914][ T9757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.634441][ T9778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.309974][ T9809] binder: BC_ATTEMPT_ACQUIRE not supported [ 210.342584][ T9809] binder: 9808:9809 ioctl c0306201 200000000100 returned -22 [ 210.923280][ T9842] mkiss: ax0: crc mode is auto. [ 211.018034][ T9846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.624965][ T9871] sp0: Synchronizing with TNC [ 212.019178][ T9870] [U] [ 212.371595][ T9890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.611824][ T9903] syz.4.1052: attempt to access beyond end of device [ 212.611824][ T9903] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 212.937049][ T9916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.493156][ T9926] input: syz1 as /devices/virtual/input/input43 [ 213.608287][ T9929] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.107395][ T9975] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1073' sets config #1 [ 215.158930][ T9975] mkiss: ax0: crc mode is auto. [ 215.462789][ T9980] CUSE: info not properly terminated [ 215.616785][ T9988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.625725][ T9984] syz.0.1074: attempt to access beyond end of device [ 215.625725][ T9984] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.489416][T10030] binder: 10027:10030 ioctl c0306201 2000000002c0 returned -14 [ 216.923227][T10043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.143115][T10052] random: crng reseeded on system resumption [ 217.749783][T10071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.806597][T10071] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 218.337327][T10097] input: syz1 as /devices/virtual/input/input44 [ 218.960802][T10124] binder: 10123:10124 ioctl c00c6211 0 returned -14 [ 219.009905][T10124] binder: 10123:10124 ioctl c00c6211 0 returned -14 [ 219.849104][T10159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.914881][T10154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.607836][ T5835] cgroup: fork rejected by pids controller in /syz0 [ 221.178050][ T1346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.353310][ T1346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.508315][ T1346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.833192][ T1346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.188707][ T1346] bridge_slave_1: left allmulticast mode [ 222.202287][ T1346] bridge_slave_1: left promiscuous mode [ 222.225609][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.320890][ T1346] bridge_slave_0: left allmulticast mode [ 222.327327][ T1346] bridge_slave_0: left promiscuous mode [ 222.333086][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.394486][T10254] binder: 10253:10254 ioctl c0306201 2000000002c0 returned -14 [ 222.440665][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.450185][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.458005][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.466336][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.476252][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.500511][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.516979][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.524981][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.559959][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.576393][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.911027][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.943199][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.981229][ T1346] bond0 (unregistering): Released all slaves [ 224.630547][T10255] chnl_net:caif_netlink_parms(): no params data found [ 224.645494][ T5847] Bluetooth: hci2: command tx timeout [ 224.859971][T10292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.875312][T10292] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 224.947568][T10255] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.967592][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.974871][T10255] bridge_slave_0: entered allmulticast mode [ 225.037447][T10255] bridge_slave_0: entered promiscuous mode [ 225.078717][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.091835][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.108980][T10255] bridge_slave_1: entered allmulticast mode [ 225.119022][T10255] bridge_slave_1: entered promiscuous mode [ 225.842755][ T1346] hsr_slave_0: left promiscuous mode [ 225.935368][ T1346] hsr_slave_1: left promiscuous mode [ 225.941314][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.968516][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.026217][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.047976][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.119292][ T1346] veth1_macvtap: left promiscuous mode [ 226.131581][ T1346] veth0_macvtap: left promiscuous mode [ 226.151145][ T1346] veth1_vlan: left promiscuous mode [ 226.171281][ T1346] veth0_vlan: left promiscuous mode [ 227.128408][T10377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.142072][T10379] input: syz1 as /devices/virtual/input/input45 [ 227.341358][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 227.426625][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 227.532128][T10383] AppArmor: change_hat: Invalid input '' [ 228.500415][T10255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.530695][T10255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.641930][T10255] team0: Port device team_slave_0 added [ 228.667187][T10255] team0: Port device team_slave_1 added [ 228.751904][T10255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.763275][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.808919][T10255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.904010][T10255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.934112][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.960041][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.005326][T10255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.431200][T10255] hsr_slave_0: entered promiscuous mode [ 229.476300][T10255] hsr_slave_1: entered promiscuous mode [ 229.482547][T10255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.520984][T10255] Cannot create hsr debugfs directory [ 230.917032][T10255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.947234][T10255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.970045][T10255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.997707][T10255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.208179][T10255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.238744][T10255] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.261767][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.268972][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.301452][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.308651][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.380417][T10457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.772549][T10466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.048817][T10255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.164779][T10255] veth0_vlan: entered promiscuous mode [ 232.201863][T10255] veth1_vlan: entered promiscuous mode [ 232.279619][T10255] veth0_macvtap: entered promiscuous mode [ 232.299290][T10255] veth1_macvtap: entered promiscuous mode [ 232.362526][T10255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.401082][T10255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.481533][T10255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.511674][T10255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.545505][T10255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.554240][T10255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.098528][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.120152][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.189725][T10504] input: syz1 as /devices/virtual/input/input46 [ 233.261090][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.289824][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.560025][T10521] random: crng reseeded on system resumption [ 234.163725][T10551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.197124][T10597] CUSE: zero length info key specified [ 235.241167][T10597] input: syz1 as /devices/virtual/input/input47 [ 236.546907][T10658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.586849][T10665] input: syz0 as /devices/virtual/input/input48 [ 237.116920][T10672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.722133][ T30] audit: type=1800 audit(1750383348.117:6): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1215" name="dmabuf" dev="dmabuf" ino=8 res=0 errno=0 [ 238.565433][T10712] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.578820][ T4430] Bluetooth: hci4: Frame reassembly failed (-84) [ 240.393334][T10787] block nbd4: NBD_DISCONNECT [ 240.515298][T10790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.635559][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 241.657710][T10828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.737536][T10881] input: syz0 as /devices/virtual/input/input49 [ 244.325695][T10907] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.574312][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 245.603708][ T5844] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 246.126822][T10951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.230666][T10956] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.605972][T10965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.595337][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 247.595349][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 248.223603][T11021] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.479775][T11035] CUSE: info not properly terminated [ 248.788163][T11047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.957882][T11063] CUSE: info not properly terminated [ 250.704549][T11108] ALSA: seq fatal error: cannot create timer (-22) [ 250.893556][T11120] input: syz1 as /devices/virtual/input/input52 [ 250.961609][T11121] input: syz1 as /devices/virtual/input/input53 [ 251.055026][T11124] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.483546][T11130] program syz.4.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.535176][T11131] program syz.4.1344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.554018][T11131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 251.854273][ T1038] Bluetooth: hci4: Frame reassembly failed (-84) [ 251.879567][ T5844] Bluetooth: hci4: Malformed Event: 0x02 [ 251.927754][T11142] input: syz1 as /devices/virtual/input/input54 [ 252.544633][T11170] syz.3.1352: attempt to access beyond end of device [ 252.544633][T11170] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 253.877714][T11238] binder: 11234:11238 ioctl 400c620e 2000000014c0 returned -22 [ 253.915422][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.995442][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 254.942403][T11258] syz.4.1374: attempt to access beyond end of device [ 254.942403][T11258] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 255.207576][T11265] input: syz1 as /devices/virtual/input/input56 [ 255.521863][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530716][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.543855][T11275] program syz.1.1379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.833651][T11282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.483820][T11328] input: syz1 as /devices/virtual/input/input57 [ 259.013305][T11360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.799455][T11383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.003844][T11387] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 260.574799][T11413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.822172][T11428] syz.3.1424: attempt to access beyond end of device [ 260.822172][T11428] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 260.826267][ T30] audit: type=1400 audit(1750383371.217:7): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=11424 comm="syz.0.1423" [ 261.459418][T11453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.534997][T11449] binder: 11448:11449 ioctl c018620b 200000000100 returned -14 [ 261.835872][T11464] PM: Enabling pm_trace changes system date and time during resume. [ 261.835872][T11464] PM: Correct system time has to be restored manually after resume. [ 262.118704][T11471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.211456][T11475] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 263.011516][T11485] PM: Enabling pm_trace changes system date and time during resume. [ 263.011516][T11485] PM: Correct system time has to be restored manually after resume. [ 263.035033][T11487] PM: Enabling pm_trace changes system date and time during resume. [ 263.035033][T11487] PM: Correct system time has to be restored manually after resume. [ 263.035173][T11485] PM: Enabling pm_trace changes system date and time during resume. [ 263.035173][T11485] PM: Correct system time has to be restored manually after resume. [ 263.309394][T11492] binder: 11490:11492 ioctl c018620b 9999999999999999 returned -14 [ 263.322210][T11492] binder: binder_mmap: 11490 200000787000-20000078b000 bad vm_flags failed -1 [ 263.346345][T11493] binder: BINDER_SET_CONTEXT_MGR already set [ 263.361837][T11493] binder: 11489:11493 ioctl 4018620d 200000000280 returned -16 [ 265.246787][T11535] random: crng reseeded on system resumption [ 265.415713][T11538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.509400][T11540] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 265.907129][T11553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.240277][T11590] random: crng reseeded on system resumption [ 267.397575][T11596] misc userio: Begin command sent, but we're already running [ 267.408825][T11596] misc userio: Begin command sent, but we're already running [ 267.423301][T11596] misc userio: Begin command sent, but we're already running [ 267.440960][T11596] misc userio: Begin command sent, but we're already running [ 267.457454][T11596] misc userio: Begin command sent, but we're already running [ 268.129720][T11621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.798930][T11648] tap0: tun_chr_ioctl cmd 1074025677 [ 268.804633][T11648] tap0: linktype set to 776 [ 269.306760][T11660] syz.3.1492: attempt to access beyond end of device [ 269.306760][T11660] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 269.667019][T11668] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.654618][T11735] CUSE: info not properly terminated [ 272.693823][T11735] autofs4:pid:11735:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 273.038693][T11746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.076678][T11749] [U] ^C [ 273.128029][T11746] input: syz1 as /devices/virtual/input/input60 [ 273.798633][T11769] syz.3.1526: attempt to access beyond end of device [ 273.798633][T11769] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 274.110939][T11779] input: syz1 as /devices/virtual/input/input61 [ 274.243480][T11784] binder: 11783:11784 ioctl 40046210 ffffffffffffffff returned -14 [ 274.543552][T11801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.589438][T11803] input: syz1 as /devices/virtual/input/input62 [ 274.607438][T11802] sp0: Synchronizing with TNC [ 275.074124][T11824] binder: 11823:11824 ioctl c0306201 200000000080 returned -14 [ 275.094501][T11824] binder: 11823:11824 ioctl c0306201 200000000540 returned -14 [ 275.138632][T11831] program syz.4.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.571586][T11850] input: syz0 as /devices/virtual/input/input63 [ 276.677575][T11885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.688172][T11885] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 276.726881][T11882] input: syz1 as /devices/virtual/input/input64 [ 276.870565][T11888] program syz.4.1561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.430907][T11932] program syz.3.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.116675][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 280.976001][T12018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.530084][T12036] random: crng reseeded on system resumption [ 282.155476][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 283.608131][T12073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.623517][T12073] usb usb1: check_ctrlrecip: process 12073 (syz.4.1616) requesting ep 01 but needs 81 [ 283.640173][T12073] usb usb1: usbfs: process 12073 (syz.4.1616) did not claim interface 0 before use [ 286.571985][T12169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.523146][T12208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.107740][T12231] CUSE: info not properly terminated [ 288.479435][T12235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.669896][T12263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.546763][T12292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.576951][T12293] CUSE: zero length info key specified [ 291.552515][T12320] program syz.1.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.381820][T12347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.565401][T12379] input: syz0 as /devices/virtual/input/input67 [ 294.138834][T12388] binder: 12387:12388 ioctl c0306201 200000000640 returned -22 [ 294.170667][T12388] misc userio: No port type given on /dev/userio [ 294.179838][T12388] misc userio: The device must be registered before sending interrupts [ 295.074537][T12400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.432879][T12413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.453883][T12413] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 295.473610][T12413] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 295.521256][T12418] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 296.726545][T12468] vivid-001: disconnect [ 296.777436][T12470] usb usb9: usbfs: process 12470 (syz.4.1734) did not claim interface 0 before use [ 297.172289][T12479] mkiss: ax0: crc mode is auto. [ 297.279981][T12485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.440750][T12467] vivid-001: reconnect [ 299.110703][T12533] mkiss: ax0: crc mode is auto. [ 299.129547][T12533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.257831][T12537] [U] ^R [ 299.304659][T12537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.516092][T12544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.305829][T12559] binder: 12558:12559 ioctl 40046205 0 returned -22 [ 300.330976][T12559] binder: 12558:12559 ioctl c0306201 200000000040 returned -14 [ 300.650640][T12574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.681608][T12573] usb usb9: usbfs: process 12573 (syz.4.1763) did not claim interface 0 before use [ 300.959385][T12582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.199963][T12590] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 301.241015][T12590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.595060][T12595] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 301.641283][T12597] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 301.772456][T12600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.869974][T12607] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 301.985482][ T5882] psmouse serio5: Failed to reset mouse on : -5 [ 302.148661][T12619] input: syz1 as /devices/virtual/input/input69 [ 303.267472][T12634] random: crng reseeded on system resumption [ 303.391790][T12641] binder: 12640:12641 ioctl c018620c 200000000500 returned -1 [ 303.418707][T12641] input: syz0 as /devices/virtual/input/input72 [ 303.425186][T12641] input: failed to attach handler leds to device input72, error: -6 [ 305.775374][ T5882] misc userio: Buffer overflowed, userio client isn't keeping up [ 306.835045][ T5882] input: PS/2 Generic Mouse as /devices/serio5/input/input68 [ 306.896445][T12706] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 306.917413][ T1038] Bluetooth: hci4: Frame reassembly failed (-84) [ 307.085341][ T5882] psmouse serio5: Failed to enable mouse on [ 307.881180][T12735] random: crng reseeded on system resumption [ 307.899533][T12733] vivid-004: disconnect [ 308.435625][T12752] vivid-000: ================= START STATUS ================= [ 308.452261][T12752] vivid-000: Test Pattern: 75% Colorbar [ 308.465286][T12752] vivid-000: Fill Percentage of Frame: 100 [ 308.477867][T12752] vivid-000: Horizontal Movement: No Movement [ 308.494807][T12752] vivid-000: Vertical Movement: No Movement [ 308.507510][T12752] vivid-000: OSD Text Mode: All [ 308.526941][T12752] vivid-000: Show Border: true [ 308.548246][T12752] vivid-000: Show Square: false [ 308.553176][T12752] vivid-000: Sensor Flipped Horizontally: false [ 308.605956][T12752] vivid-000: Sensor Flipped Vertically: true [ 308.612015][T12752] vivid-000: Insert SAV Code in Image: true [ 308.630006][T12732] vivid-004: reconnect [ 308.653966][T12752] vivid-000: Insert EAV Code in Image: false [ 308.714574][T12752] vivid-000: Insert Video Guard Band: false [ 308.773863][T12752] vivid-000: Reduced Framerate: false [ 308.819946][T12752] vivid-000: HDMI 000-0 Is Connected To: None [ 308.891307][T12752] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 308.953669][T12752] vivid-000: Enable Capture Cropping: true grabbed [ 308.962124][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 308.967944][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 309.017936][T12752] vivid-000: Enable Capture Composing: false grabbed [ 309.044365][T12752] vivid-000: Enable Capture Scaler: true grabbed [ 309.063654][T12752] vivid-000: Timestamp Source: Start of Exposure [ 309.136144][T12752] vivid-000: Colorspace: sRGB [ 309.175624][T12752] vivid-000: Transfer Function: Default [ 309.219535][T12752] vivid-000: Y'CbCr Encoding: Default [ 309.265458][T12752] vivid-000: HSV Encoding: Hue 0-179 [ 309.270829][T12752] vivid-000: Quantization: Default [ 309.284069][T12752] vivid-000: Apply Alpha To Red Only: true [ 309.325363][T12752] vivid-000: Standard Aspect Ratio: 4x3 [ 309.351377][T12752] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 309.396489][T12752] vivid-000: DV Timings: 4096x2160p60 inactive [ 309.402711][T12752] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 309.449436][T12752] vivid-000: Maximum EDID Blocks: 2 [ 309.465283][T12752] vivid-000: Limited RGB Range (16-235): false [ 309.483243][T12752] vivid-000: Rx RGB Quantization Range: Automatic [ 309.499932][T12752] vivid-000: Power Present: 0x00000000 [ 309.510037][T12752] tpg source WxH: 320x180 (Luma) [ 309.520141][T12752] tpg field: 1 [ 309.540357][T12752] tpg crop: (0,0)/320x180 [ 309.544802][T12752] tpg compose: (0,0)/320x180 [ 309.560576][T12752] tpg colorspace: 6 [ 309.564418][T12752] tpg transfer function: 0/1 [ 309.585036][T12752] tpg quantization: 0/1 [ 309.611455][T12752] tpg RGB range: 0/2 [ 309.615566][T12752] vivid-000: ================== END STATUS ================== [ 310.587742][T12801] mkiss: ax0: crc mode is auto. [ 310.928339][T12812] kernel profiling enabled (shift: 6) [ 311.170983][T12821] binder: 12816:12821 ioctl 40046205 0 returned -22 [ 311.262660][T12821] binder: 12816:12821 ioctl c0306201 0 returned -14 [ 311.275648][T12821] binder: 12816:12821 ioctl c0306201 0 returned -14 [ 311.447176][T12828] input: syz0 as /devices/virtual/input/input75 [ 311.808589][T12836] CUSE: info not properly terminated [ 312.588351][T12867] misc userio: The device must be registered before sending interrupts [ 314.028109][ T30] audit: type=1804 audit(1750383424.417:8): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1861" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1157 res=1 errno=0 [ 314.117827][ T30] audit: type=1800 audit(1750383424.427:9): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1861" name="cgroup.controllers" dev="tmpfs" ino=1157 res=0 errno=0 [ 314.145841][ T30] audit: type=1804 audit(1750383424.427:10): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1861" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1157 res=1 errno=0 [ 315.617443][T12954] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 315.883588][T12961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 316.965609][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.971952][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.747792][T13051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.962819][T13061] syz.4.1907: attempt to access beyond end of device [ 318.962819][T13061] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 319.900103][T13091] sp0: Synchronizing with TNC [ 321.606556][T13126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.432799][T13141] dlm: no locking on control device [ 322.473944][T13135] ALSA: mixer_oss: invalid OSS volume '' [ 322.690410][T13155] syz.3.1934: attempt to access beyond end of device [ 322.690410][T13155] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 324.917107][T13227] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 327.275158][T13297] CUSE: info not properly terminated [ 328.447263][T13348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.475119][T13347] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 328.537845][T13354] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 329.813942][T13404] CUSE: info not properly terminated [ 329.876988][T13404] CUSE: info not properly terminated [ 331.132621][T13438] [U] ^B [ 331.361442][T13447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 332.271803][T13491] input: syz1 as /devices/virtual/input/input76 [ 332.551695][T13491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.893059][T13533] binder: 13529:13533 ioctl c018620c 200000001180 returned -22 [ 334.332003][T13545] i2c i2c-0: Invalid block write size 254 [ 334.578223][T13552] CUSE: info not properly terminated [ 335.032490][T13559] kvm: kvm [13557]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 335.888279][T13591] binder_alloc: binder_alloc_mmap_handler: 13586 200000735000-200000736000 already mapped failed -16 [ 336.508004][T13620] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.051993][T13637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.596155][T13660] random: crng reseeded on system resumption [ 337.672044][T13662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.882230][T13723] usb usb8: usbfs: process 13723 (syz.1.2089) did not claim interface 0 before use [ 340.797171][T13750] binder: 13746:13750 ioctl c0306201 200000000640 returned -22 [ 341.181819][T13756] tun0: tun_chr_ioctl cmd 1074025675 [ 341.187841][T13756] tun0: persist disabled [ 341.206811][T13756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.339042][ T2157] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 341.360363][ T2157] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.549950][T13794] sp0: Synchronizing with TNC [ 342.907498][T13788] [U] [ 343.271714][T13812] binder: 13811:13812 ioctl c00c620f 0 returned -14 [ 344.769991][T13859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.435231][ T30] audit: type=1800 audit(1750383457.827:11): pid=13956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2160" name="dmabuf" dev="dmabuf" ino=13 res=0 errno=0 [ 347.853304][ T30] audit: type=1400 audit(1750383458.247:12): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=2F29A3 pid=13971 comm="syz.0.2166" [ 347.889598][T13970] input: syz0 as /devices/virtual/input/input79 [ 348.427246][T13984] QAT: failed to copy from user cfg_data. [ 350.275272][ T30] audit: type=1800 audit(1750383460.667:13): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2183" name="hidraw5" dev="devtmpfs" ino=2947 res=0 errno=0 [ 350.322696][T14027] kvm: kvm [14025]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 350.596166][T14039] loop6: detected capacity change from 0 to 4 [ 351.074903][T14061] input: syz0 as /devices/virtual/input/input80 [ 351.687530][ T30] audit: type=1400 audit(1750383462.087:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=14077 comm="syz.4.2199" [ 352.359413][T14096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.275359][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 353.275579][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 353.791873][T14151] QAT: Stopping all acceleration devices. [ 354.036651][T14163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.361118][T14177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.859212][T14194] input: syz1 as /devices/virtual/input/input82 [ 354.895343][T14194] input: failed to attach handler leds to device input82, error: -6 [ 356.018232][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.036172][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.043735][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.052577][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.061996][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.105996][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.113742][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.124040][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.134626][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.145849][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.584312][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.787031][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.892509][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.942696][T14212] chnl_net:caif_netlink_parms(): no params data found [ 357.491632][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.616732][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.651757][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.669349][T14212] bridge_slave_0: entered allmulticast mode [ 357.690368][T14212] bridge_slave_0: entered promiscuous mode [ 357.714564][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.732303][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.752546][T14212] bridge_slave_1: entered allmulticast mode [ 357.764386][T14212] bridge_slave_1: entered promiscuous mode [ 357.939205][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.975059][T14250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.986113][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.156818][T14212] team0: Port device team_slave_0 added [ 358.218969][T14212] team0: Port device team_slave_1 added [ 358.243803][ T36] bridge_slave_1: left allmulticast mode [ 358.246580][ T5847] Bluetooth: hci0: command tx timeout [ 358.258201][ T36] bridge_slave_1: left promiscuous mode [ 358.286341][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.326695][ T36] bridge_slave_0: left allmulticast mode [ 358.333140][ T36] bridge_slave_0: left promiscuous mode [ 358.346213][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.790758][T14270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.004399][T14282] [U]  [ 359.007430][T14282] [U] K{ [ 359.010461][T14282] [U] t 1ŠFfˊ`GJgo/mC [ 359.017420][T14282] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 359.032969][T14282] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 359.043409][T14282] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 359.079040][T14282] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 359.102579][T14282] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 359.113705][T14282] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 359.125267][T14282] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 359.241071][T14282] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 359.249577][T14282] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 359.263195][T14282] [U] 22Ʃx?0;3u [ 359.267355][T14282] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 359.292268][T14282] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 359.301545][T14282] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 359.310125][T14282] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 359.316275][T14282] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 359.328584][T14282] [U] ec [ 359.331693][T14282] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 359.343984][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.374465][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.386175][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.401184][ T36] bond0 (unregistering): Released all slaves [ 359.482543][T14276] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 359.561258][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.594927][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.646823][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.710202][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.717974][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.750898][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.069061][T14295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.075015][T14295] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 360.077287][T14305] QAT: Invalid ioctl 21531 [ 360.083927][T14212] hsr_slave_0: entered promiscuous mode [ 360.100375][T14212] hsr_slave_1: entered promiscuous mode [ 360.112747][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.134794][T14212] Cannot create hsr debugfs directory [ 360.214442][ T36] hsr_slave_0: left promiscuous mode [ 360.251149][ T36] hsr_slave_1: left promiscuous mode [ 360.266017][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.294082][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.320231][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.339560][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.409692][ T36] veth1_macvtap: left promiscuous mode [ 360.438526][ T36] veth0_macvtap: left promiscuous mode [ 360.559177][ T36] veth1_vlan: left promiscuous mode [ 360.570203][ T36] veth0_vlan: left promiscuous mode [ 360.687715][T14324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.887077][T14328] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.661454][ T36] team0 (unregistering): Port device team_slave_1 removed [ 361.745814][ T36] team0 (unregistering): Port device team_slave_0 removed [ 361.973393][T14342] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 362.002625][T14342] CPU: 0 UID: 0 PID: 14342 Comm: syz.3.2267 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 362.002649][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.002670][T14342] Call Trace: [ 362.002680][T14342] [ 362.002687][T14342] dump_stack_lvl+0x189/0x250 [ 362.002718][T14342] ? kernfs_path_from_node+0x2c/0x260 [ 362.002736][T14342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.002756][T14342] ? __pfx__printk+0x10/0x10 [ 362.002778][T14342] ? kernfs_path_from_node+0x2c/0x260 [ 362.002793][T14342] ? kernfs_path_from_node+0x2c/0x260 [ 362.002810][T14342] ? kernfs_path_from_node+0x22c/0x260 [ 362.002825][T14342] ? kernfs_path_from_node+0x2c/0x260 [ 362.002844][T14342] sysfs_create_dir_ns+0x259/0x280 [ 362.002873][T14342] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 362.002908][T14342] ? do_raw_spin_unlock+0x122/0x240 [ 362.002937][T14342] kobject_add_internal+0x59f/0xb40 [ 362.002965][T14342] kobject_add+0x155/0x220 [ 362.002988][T14342] ? __pfx_kobject_add+0x10/0x10 [ 362.003007][T14342] ? do_raw_spin_unlock+0x122/0x240 [ 362.003035][T14342] ? get_device_parent+0x366/0x3a0 [ 362.003058][T14342] device_add+0x408/0xb50 [ 362.003080][T14342] tty_register_device_attr+0x3fe/0x8f0 [ 362.003107][T14342] ? __pfx_tty_register_device_attr+0x10/0x10 [ 362.003135][T14342] ? tty_port_init+0x136/0x1a0 [ 362.003154][T14342] ? gsm_dlci_alloc+0x32a/0x640 [ 362.003177][T14342] gsm_activate_mux+0x110/0x2a0 [ 362.003202][T14342] gsmld_ioctl+0x1261/0x1870 [ 362.003231][T14342] ? __pfx_gsmld_ioctl+0x10/0x10 [ 362.003260][T14342] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 362.003299][T14342] ? __pfx_gsmld_ioctl+0x10/0x10 [ 362.003316][T14342] tty_ioctl+0x9c6/0xde0 [ 362.003332][T14342] ? __pfx_tty_ioctl+0x10/0x10 [ 362.003349][T14342] __se_sys_ioctl+0xfc/0x170 [ 362.003373][T14342] do_syscall_64+0xfa/0x3b0 [ 362.003389][T14342] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.003415][T14342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.003432][T14342] ? clear_bhb_loop+0x60/0xb0 [ 362.003452][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.003469][T14342] RIP: 0033:0x7f276878e929 [ 362.003484][T14342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.003498][T14342] RSP: 002b:00007f27665d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.003516][T14342] RAX: ffffffffffffffda RBX: 00007f27689b6160 RCX: 00007f276878e929 [ 362.003528][T14342] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 362.003539][T14342] RBP: 00007f2768810b39 R08: 0000000000000000 R09: 0000000000000000 [ 362.003549][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.003558][T14342] R13: 0000000000000001 R14: 00007f27689b6160 R15: 00007ffcd29b3068 [ 362.003585][T14342] [ 362.057403][T14342] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 363.516481][T14365] i2c i2c-0: Invalid block write size 34 [ 364.077906][T14212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.110612][T14212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.134089][T14212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.160040][T14212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.188357][T14391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.521351][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.614759][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.659822][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.667000][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.747023][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.754198][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.240041][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.341101][T14212] veth0_vlan: entered promiscuous mode [ 365.371505][T14212] veth1_vlan: entered promiscuous mode [ 365.440964][T14212] veth0_macvtap: entered promiscuous mode [ 365.464125][T14212] veth1_macvtap: entered promiscuous mode [ 365.538271][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.583090][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.615646][T14212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.634669][T14212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.657802][T14212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.683956][T14212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.959826][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.005474][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.084057][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.103726][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.132424][T14448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.389271][T14457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.476420][T14457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.768612][T14474] random: crng reseeded on system resumption [ 366.988165][T14483] CUSE: DEVNAME unspecified [ 368.973230][T14558] program syz.3.2306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.014444][T14558] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 369.396625][T14569] input: syz1 as /devices/virtual/input/input84 [ 369.478416][ T30] audit: type=1400 audit(1750383479.867:15): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14567 comm="syz.4.2308" [ 371.373698][T14644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.627166][T14651] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 371.759274][T14662] syz.3.2337: attempt to access beyond end of device [ 371.759274][T14662] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 373.454079][T14721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.766174][T14728] input: syz1 as /devices/virtual/input/input85 [ 374.380864][T14742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.722444][T14820] input: syz1 as /devices/virtual/input/input86 [ 376.955379][ T30] audit: type=1800 audit(1750383487.347:16): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2385" name="dmabuf" dev="dmabuf" ino=15 res=0 errno=0 [ 377.016914][ T1038] Bluetooth: hci4: Frame reassembly failed (-84) [ 377.778163][ T30] audit: type=1400 audit(1750383488.177:17): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=14852 comm="syz.1.2393" [ 378.417717][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.424074][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.646505][T14880] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 379.036409][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 379.044594][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 379.150437][T14893] binder: 14888:14893 ioctl c0306201 2000000003c0 returned -14 [ 379.771612][T14908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.176148][T14920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.286587][T14920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.371259][T14923] tun0: tun_chr_ioctl cmd 1074025675 [ 380.376774][T14923] tun0: persist disabled [ 380.584836][T14928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.606333][T14928] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 380.827480][T14936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.397081][T14965] syz.1.2424: attempt to access beyond end of device [ 381.397081][T14965] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 381.457835][T14968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.696720][T15017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.204323][T15043] syz.1.2446: attempt to access beyond end of device [ 383.204323][T15043] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 384.520420][T15092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.037921][T15106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.649887][T15120] syz.3.2467: attempt to access beyond end of device [ 385.649887][T15120] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 385.698071][T15122] program syz.1.2468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.549237][T15189] input: syz1 as /devices/virtual/input/input88 [ 388.594504][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 388.818336][T15238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1271408910 (2542817820 ns) > initial count (2415425524 ns). Using initial count to start timer. [ 389.447330][ T30] audit: type=1400 audit(1750383499.847:18): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=15248 comm="syz.0.2506" [ 389.485380][T15251] nvme_fabrics: missing parameter 'transport=%s' [ 389.485411][T15251] nvme_fabrics: missing parameter 'nqn=%s' [ 389.695853][T15263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.943144][T15278] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 390.049959][T15284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.085746][T15292] sg_write: data in/out 808464396/2 bytes for SCSI command 0x30-- guessing data in; [ 390.085746][T15292] program syz.3.2517 not setting count and/or reply_len properly [ 390.635885][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 390.644075][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.063573][T15335] vivid-003: disconnect [ 391.112181][T15337] CUSE: info not properly terminated [ 391.570371][T15334] vivid-003: reconnect [ 391.806648][T15356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.059445][T15370] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 392.059466][T15370] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 392.084747][T15372] mkiss: ax0: crc mode is auto. [ 392.267764][T15381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.276457][T15380] binder_alloc: binder_alloc_mmap_handler: 15378 200000735000-200000736000 already mapped failed -16 [ 392.683699][T15391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.730260][T15397] tap0: tun_chr_ioctl cmd 1074025680 [ 392.849239][T15397] tap0: tun_chr_ioctl cmd 1074025673 [ 392.882780][T15397] tap0: tun_chr_ioctl cmd 1074025680 [ 394.354012][T15472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.495709][T15474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.089340][T15497] random: crng reseeded on system resumption [ 395.511316][T15509] blktrace: Concurrent blktraces are not allowed on sg0 [ 395.935457][T15519] autofs4:pid:15519:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 395.955775][T15519] autofs4:pid:15519:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 396.077264][T15524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.958746][T15557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.332747][T15572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.845082][T15626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.006290][T15628] mkiss: ax0: crc mode is auto. [ 399.364985][T15643] misc userio: Can't change port type on an already running userio instance [ 401.133060][T15704] binder: 15702:15704 ioctl c0306201 2000000003c0 returned -14 [ 401.172200][T15705] input: syz1 as /devices/virtual/input/input93 [ 402.463380][T15745] program syz.3.2651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.006976][T15763] CUSE: info not properly terminated [ 403.740338][T15778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.492630][T15821] dlm: no locking on control device [ 405.498801][T15821] syz.3.2669: attempt to access beyond end of device [ 405.498801][T15821] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 405.586397][T15825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.855723][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 405.863524][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 405.895786][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 405.901890][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 405.915750][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 405.939638][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 405.947715][T15842] tap0: tun_chr_ioctl cmd 1074025680 [ 405.979425][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 405.998408][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.015623][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.023234][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.055368][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.061468][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.106630][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.112647][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.135782][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.165152][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.176680][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.204280][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.248057][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.254110][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.299883][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.325337][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.342567][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.378035][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.400418][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.429168][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.461937][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.475411][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.493149][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.510927][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.536470][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.552380][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.577590][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.591965][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.600287][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.609321][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.617365][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.623495][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.634316][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.644069][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.654920][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.662318][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 406.670496][T15840] binder: BINDER_SET_CONTEXT_MGR already set [ 406.683098][T15840] binder: 15839:15840 ioctl 4018620d 200000000100 returned -16 [ 407.943708][T15898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.236950][T15909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.873274][T15932] QAT: Stopping all acceleration devices. [ 410.052979][T15997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.257207][T16002] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 411.024934][T16025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.422741][T16046] ALSA: mixer_oss: invalid OSS volume '(' [ 411.447699][T16046] syz.4.2718: attempt to access beyond end of device [ 411.447699][T16046] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 412.187966][T16063] mkiss: ax0: crc mode is auto. [ 414.219929][T16125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.347997][T16162] loop6: detected capacity change from 0 to 524287999 [ 415.672876][T16179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.313126][T16329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.840142][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.846560][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.278406][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.284829][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.718101][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.724466][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.275296][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 565.282866][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 565.290635][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.299423][ T31] task:kworker/1:1 state:D stack:24568 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 565.311658][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 565.318516][ T31] Call Trace: [ 565.321805][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.324740][ T31] __schedule+0x16f5/0x4d00 [ 565.329500][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 565.334747][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.341573][ T31] ? schedule+0x165/0x360 [ 565.346167][ T31] ? __pfx___schedule+0x10/0x10 [ 565.351071][ T31] ? schedule+0x91/0x360 [ 565.360549][ T31] schedule+0x165/0x360 [ 565.375354][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.380873][ T31] __mutex_lock+0x724/0xe80 [ 565.402040][ T31] ? look_up_lock_class+0x74/0x170 [ 565.415190][ T31] ? __mutex_lock+0x51b/0xe80 [ 565.419947][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 565.426586][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.431668][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 565.437812][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 565.443559][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 565.449872][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 565.455690][ T31] process_scheduled_works+0xae1/0x17b0 [ 565.461278][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.467339][ T31] worker_thread+0x8a0/0xda0 [ 565.471961][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.478391][ T31] ? __kthread_parkme+0x7b/0x200 [ 565.483359][ T31] kthread+0x70e/0x8a0 [ 565.487482][ T31] ? __pfx_worker_thread+0x10/0x10 [ 565.492615][ T31] ? __pfx_kthread+0x10/0x10 [ 565.497300][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.502522][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.507788][ T31] ? __pfx_kthread+0x10/0x10 [ 565.512404][ T31] ret_from_fork+0x3f9/0x770 [ 565.517108][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 565.522242][ T31] ? __switch_to_asm+0x39/0x70 [ 565.527078][ T31] ? __switch_to_asm+0x33/0x70 [ 565.531865][ T31] ? __pfx_kthread+0x10/0x10 [ 565.536567][ T31] ret_from_fork_asm+0x1a/0x30 [ 565.541379][ T31] [ 565.544482][ T31] INFO: task kworker/1:2:2157 blocked for more than 143 seconds. [ 565.552277][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 565.560064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.568790][ T31] task:kworker/1:2 state:D stack:24264 pid:2157 tgid:2157 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 565.580951][ T31] Workqueue: events rfkill_sync_work [ 565.586280][ T31] Call Trace: [ 565.589578][ T31] [ 565.592507][ T31] __schedule+0x16f5/0x4d00 [ 565.597165][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 565.602450][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 565.608867][ T31] ? schedule+0x165/0x360 [ 565.613221][ T31] ? __pfx___schedule+0x10/0x10 [ 565.618301][ T31] ? schedule+0x91/0x360 [ 565.622569][ T31] schedule+0x165/0x360 [ 565.626788][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.632286][ T31] __mutex_lock+0x724/0xe80 [ 565.636841][ T31] ? __mutex_lock+0x51b/0xe80 [ 565.641540][ T31] ? rfkill_sync_work+0x2e/0x200 [ 565.646528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.651591][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 565.657398][ T31] rfkill_sync_work+0x2e/0x200 [ 565.662188][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 565.668173][ T31] process_scheduled_works+0xae1/0x17b0 [ 565.673759][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.680228][ T31] worker_thread+0x8a0/0xda0 [ 565.684868][ T31] kthread+0x70e/0x8a0 [ 565.689060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 565.694203][ T31] ? __pfx_kthread+0x10/0x10 [ 565.698861][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.704095][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.709361][ T31] ? __pfx_kthread+0x10/0x10 [ 565.713991][ T31] ret_from_fork+0x3f9/0x770 [ 565.718694][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 565.723824][ T31] ? __switch_to_asm+0x39/0x70 [ 565.728640][ T31] ? __switch_to_asm+0x33/0x70 [ 565.733681][ T31] ? __pfx_kthread+0x10/0x10 [ 565.738319][ T31] ret_from_fork_asm+0x1a/0x30 [ 565.743112][ T31] [ 565.746259][ T31] INFO: task syz-executor:10255 blocked for more than 143 seconds. [ 565.754162][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 565.762267][ T31] Blocked by coredump. [ 565.766934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.775796][ T31] task:syz-executor state:D stack:21928 pid:10255 tgid:10255 ppid:1 task_flags:0x40054c flags:0x00004006 [ 565.787983][ T31] Call Trace: [ 565.791292][ T31] [ 565.794258][ T31] __schedule+0x16f5/0x4d00 [ 565.798840][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.803708][ T31] ? schedule+0x165/0x360 [ 565.808090][ T31] ? __pfx___schedule+0x10/0x10 [ 565.812974][ T31] ? schedule+0x91/0x360 [ 565.817267][ T31] schedule+0x165/0x360 [ 565.821442][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.826949][ T31] __mutex_lock+0x724/0xe80 [ 565.831464][ T31] ? kobject_put+0x43f/0x480 [ 565.836179][ T31] ? __mutex_lock+0x51b/0xe80 [ 565.840878][ T31] ? rfkill_unregister+0xc8/0x220 [ 565.845962][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.851112][ T31] ? __pfx_device_del+0x10/0x10 [ 565.856009][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 565.861228][ T31] rfkill_unregister+0xc8/0x220 [ 565.866123][ T31] hci_unregister_dev+0x360/0x500 [ 565.871163][ T31] vhci_release+0x80/0xd0 [ 565.875561][ T31] ? __pfx_vhci_release+0x10/0x10 [ 565.880629][ T31] __fput+0x44c/0xa70 [ 565.884618][ T31] task_work_run+0x1d1/0x260 [ 565.889433][ T31] ? __pfx_task_work_run+0x10/0x10 [ 565.894592][ T31] ? kmem_cache_free+0x18f/0x400 [ 565.899690][ T31] do_exit+0x6ad/0x22e0 [ 565.903891][ T31] ? do_raw_spin_lock+0x121/0x290 [ 565.908998][ T31] ? __pfx_do_exit+0x10/0x10 [ 565.913620][ T31] do_group_exit+0x21c/0x2d0 [ 565.918299][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.923525][ T31] get_signal+0x1286/0x1340 [ 565.928108][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 565.933699][ T31] ? do_unlinkat+0x509/0x560 [ 565.938346][ T31] ? kmem_cache_free+0x18f/0x400 [ 565.943325][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 565.949540][ T31] ? do_unlinkat+0x509/0x560 [ 565.954174][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 565.959692][ T31] exit_to_user_mode_loop+0x75/0x110 [ 565.964999][ T31] do_syscall_64+0x2bd/0x3b0 [ 565.969627][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.975727][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.981873][ T31] ? clear_bhb_loop+0x60/0xb0 [ 565.986593][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.992502][ T31] RIP: 0033:0x7f60ccd8ded7 [ 565.996968][ T31] RSP: 002b:00007fff256a08f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 566.005635][ T31] RAX: ffffffffffffffff RBX: 0000000000004944 RCX: 00007f60ccd8ded7 [ 566.013632][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff256a09b0 [ 566.021692][ T31] RBP: 00007fff256a09b0 R08: 0000000000000000 R09: 0000000000000000 [ 566.029719][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff256a1a40 [ 566.037769][ T31] R13: 00007f60cce10925 R14: 000055555c11a4a8 R15: 0000000000000005 [ 566.045812][ T31] [ 566.048867][ T31] INFO: task syz.4.2746:16181 blocked for more than 144 seconds. [ 566.060640][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 566.068305][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.077302][ T31] task:syz.4.2746 state:D stack:25128 pid:16181 tgid:16181 ppid:9433 task_flags:0x400040 flags:0x00004006 [ 566.089274][ T31] Call Trace: [ 566.092564][ T31] [ 566.095550][ T31] __schedule+0x16f5/0x4d00 [ 566.100078][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.104930][ T31] ? schedule+0x165/0x360 [ 566.109323][ T31] ? __pfx___schedule+0x10/0x10 [ 566.114220][ T31] ? schedule+0x91/0x360 [ 566.118693][ T31] schedule+0x165/0x360 [ 566.122874][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.128386][ T31] __mutex_lock+0x724/0xe80 [ 566.132909][ T31] ? kobject_put+0x43f/0x480 [ 566.137540][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.142232][ T31] ? rfkill_unregister+0xc8/0x220 [ 566.147301][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.152351][ T31] ? __pfx_device_del+0x10/0x10 [ 566.157270][ T31] rfkill_unregister+0xc8/0x220 [ 566.162141][ T31] nfc_unregister_device+0x96/0x2a0 [ 566.167415][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 566.173151][ T31] virtual_ncidev_close+0x56/0x90 [ 566.178232][ T31] __fput+0x44c/0xa70 [ 566.182237][ T31] task_work_run+0x1d1/0x260 [ 566.186872][ T31] ? __pfx_task_work_run+0x10/0x10 [ 566.192011][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 566.197515][ T31] exit_to_user_mode_loop+0xec/0x110 [ 566.202902][ T31] do_syscall_64+0x2bd/0x3b0 [ 566.207527][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.213606][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 566.219818][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.224515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.230608][ T31] RIP: 0033:0x7f164e38e929 [ 566.235042][ T31] RSP: 002b:00007fff3fad3348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 566.243533][ T31] RAX: 0000000000000000 RBX: 00007f164e5b7ba0 RCX: 00007f164e38e929 [ 566.251542][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 566.259549][ T31] RBP: 00007f164e5b7ba0 R08: 0000000000000000 R09: 0000001e3fad363f [ 566.267570][ T31] R10: 00007f164e5b7ac0 R11: 0000000000000246 R12: 0000000000065aec [ 566.275603][ T31] R13: 00007f164e5b6080 R14: ffffffffffffffff R15: 00007fff3fad3460 [ 566.283611][ T31] [ 566.286701][ T31] INFO: task syz.4.2746:16190 blocked for more than 144 seconds. [ 566.294427][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 566.302138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.310852][ T31] task:syz.4.2746 state:D stack:25128 pid:16190 tgid:16181 ppid:9433 task_flags:0x400040 flags:0x00004004 [ 566.322844][ T31] Call Trace: [ 566.326161][ T31] [ 566.329090][ T31] __schedule+0x16f5/0x4d00 [ 566.333597][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.338651][ T31] ? schedule+0x165/0x360 [ 566.343008][ T31] ? __pfx___schedule+0x10/0x10 [ 566.347937][ T31] ? schedule+0x91/0x360 [ 566.352206][ T31] schedule+0x165/0x360 [ 566.356422][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.361902][ T31] __mutex_lock+0x724/0xe80 [ 566.366452][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.371143][ T31] ? rfkill_register+0x37/0x8e0 [ 566.376067][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.381105][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 566.386540][ T31] ? device_initialize+0x24b/0x440 [ 566.391669][ T31] rfkill_register+0x37/0x8e0 [ 566.397595][ T31] nfc_register_device+0x14a/0x320 [ 566.402752][ T31] nci_register_device+0x87f/0x9d0 [ 566.408277][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 566.413955][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 566.419492][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 566.425041][ T31] virtual_ncidev_open+0x129/0x1a0 [ 566.430292][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 566.436134][ T31] misc_open+0x2bc/0x330 [ 566.440414][ T31] chrdev_open+0x4cc/0x5e0 [ 566.444840][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 566.449914][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 566.454900][ T31] do_dentry_open+0xdf3/0x1970 [ 566.459796][ T31] vfs_open+0x3b/0x340 [ 566.463886][ T31] ? path_openat+0x2ecd/0x3830 [ 566.468743][ T31] path_openat+0x2ee5/0x3830 [ 566.473352][ T31] ? arch_stack_walk+0xfc/0x150 [ 566.478365][ T31] ? __pfx_path_openat+0x10/0x10 [ 566.483322][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.489486][ T31] do_filp_open+0x1fa/0x410 [ 566.494020][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.498974][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 566.504037][ T31] ? _raw_spin_unlock+0x28/0x50 [ 566.508989][ T31] ? alloc_fd+0x64c/0x6c0 [ 566.514082][ T31] do_sys_openat2+0x121/0x1c0 [ 566.518881][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 566.524111][ T31] ? rcu_is_watching+0x15/0xb0 [ 566.529496][ T31] __x64_sys_openat+0x138/0x170 [ 566.534501][ T31] do_syscall_64+0xfa/0x3b0 [ 566.539108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.544370][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.550534][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.555317][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.561225][ T31] RIP: 0033:0x7f164e38e929 [ 566.565680][ T31] RSP: 002b:00007f164f262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 566.574117][ T31] RAX: ffffffffffffffda RBX: 00007f164e5b6160 RCX: 00007f164e38e929 [ 566.582160][ T31] RDX: 0000000000000002 RSI: 0000200000003900 RDI: ffffffffffffff9c [ 566.590161][ T31] RBP: 00007f164e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.598208][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.606214][ T31] R13: 0000000000000001 R14: 00007f164e5b6160 R15: 00007fff3fad31e8 [ 566.614198][ T31] [ 566.617352][ T31] INFO: task syz.3.2750:16424 blocked for more than 144 seconds. [ 566.625080][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 566.632766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.641653][ T31] task:syz.3.2750 state:D stack:28328 pid:16424 tgid:16398 ppid:8960 task_flags:0x400040 flags:0x00004004 [ 566.653929][ T31] Call Trace: [ 566.657471][ T31] [ 566.660436][ T31] __schedule+0x16f5/0x4d00 [ 566.664990][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.669903][ T31] ? schedule+0x165/0x360 [ 566.674245][ T31] ? __pfx___schedule+0x10/0x10 [ 566.679172][ T31] ? schedule+0x91/0x360 [ 566.683441][ T31] schedule+0x165/0x360 [ 566.687698][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.693208][ T31] __mutex_lock+0x724/0xe80 [ 566.697784][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.702671][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.707405][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 566.712712][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.717921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.723147][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 566.729087][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.735544][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 566.741283][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 566.746440][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 566.752176][ T31] rfkill_set_block+0x1cf/0x440 [ 566.757086][ T31] rfkill_fop_write+0x44b/0x570 [ 566.761967][ T31] ? common_file_perm+0x199/0x200 [ 566.767056][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 566.772457][ T31] ? security_kernfs_init_security+0x250/0x290 [ 566.778687][ T31] ? rw_verify_area+0x258/0x650 [ 566.783560][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 566.789001][ T31] vfs_write+0x27b/0xa90 [ 566.793266][ T31] ? __pfx_vfs_write+0x10/0x10 [ 566.798258][ T31] ? __fget_files+0x2a/0x420 [ 566.803000][ T31] ? __fget_files+0x2a/0x420 [ 566.807766][ T31] ? __fget_files+0x3a0/0x420 [ 566.812483][ T31] ? __fget_files+0x2a/0x420 [ 566.817118][ T31] ksys_write+0x145/0x250 [ 566.821468][ T31] ? __pfx_ksys_write+0x10/0x10 [ 566.826374][ T31] ? rcu_is_watching+0x15/0xb0 [ 566.831159][ T31] ? do_syscall_64+0xbe/0x3b0 [ 566.835888][ T31] do_syscall_64+0xfa/0x3b0 [ 566.840401][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.845644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.851809][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.856545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.862453][ T31] RIP: 0033:0x7f276878e929 [ 566.866908][ T31] RSP: 002b:00007f27665f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.875440][ T31] RAX: ffffffffffffffda RBX: 00007f27689b6080 RCX: 00007f276878e929 [ 566.883418][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 566.891426][ T31] RBP: 00007f2768810b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.899452][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.907509][ T31] R13: 0000000000000000 R14: 00007f27689b6080 R15: 00007ffcd29b3068 [ 566.915550][ T31] [ 566.918602][ T31] INFO: task syz.3.2750:16460 blocked for more than 145 seconds. [ 566.926388][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 566.934019][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.942726][ T31] task:syz.3.2750 state:D stack:27112 pid:16460 tgid:16398 ppid:8960 task_flags:0x400040 flags:0x00004004 [ 566.954695][ T31] Call Trace: [ 566.958053][ T31] [ 566.960995][ T31] __schedule+0x16f5/0x4d00 [ 566.965550][ T31] ? __kasan_slab_free+0x62/0x70 [ 566.970505][ T31] ? security_file_open+0xb1/0x270 [ 566.975727][ T31] ? do_dentry_open+0x35e/0x1970 [ 566.980691][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.985568][ T31] ? schedule+0x165/0x360 [ 566.989931][ T31] ? __pfx___schedule+0x10/0x10 [ 566.994796][ T31] ? schedule+0x91/0x360 [ 566.999098][ T31] schedule+0x165/0x360 [ 567.003278][ T31] schedule_preempt_disabled+0x13/0x30 [ 567.008800][ T31] __mutex_lock+0x724/0xe80 [ 567.013326][ T31] ? __mutex_lock+0x51b/0xe80 [ 567.018068][ T31] ? misc_open+0x51/0x330 [ 567.022420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 567.027506][ T31] misc_open+0x51/0x330 [ 567.031683][ T31] chrdev_open+0x4cc/0x5e0 [ 567.036140][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.041102][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.046094][ T31] do_dentry_open+0xdf3/0x1970 [ 567.050894][ T31] vfs_open+0x3b/0x340 [ 567.054986][ T31] ? path_openat+0x2ecd/0x3830 [ 567.059835][ T31] path_openat+0x2ee5/0x3830 [ 567.064459][ T31] ? arch_stack_walk+0xfc/0x150 [ 567.069451][ T31] ? __pfx_path_openat+0x10/0x10 [ 567.074427][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.080598][ T31] do_filp_open+0x1fa/0x410 [ 567.085176][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.090062][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 567.095166][ T31] ? _raw_spin_unlock+0x28/0x50 [ 567.100056][ T31] ? alloc_fd+0x64c/0x6c0 [ 567.104399][ T31] do_sys_openat2+0x121/0x1c0 [ 567.109129][ T31] ? __se_sys_futex+0x36f/0x400 [ 567.114002][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.119304][ T31] ? rcu_is_watching+0x15/0xb0 [ 567.124105][ T31] __x64_sys_openat+0x138/0x170 [ 567.129009][ T31] do_syscall_64+0xfa/0x3b0 [ 567.133526][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.138773][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.144860][ T31] ? clear_bhb_loop+0x60/0xb0 [ 567.149585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.155526][ T31] RIP: 0033:0x7f276878e929 [ 567.159953][ T31] RSP: 002b:00007f27661b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.168433][ T31] RAX: ffffffffffffffda RBX: 00007f27689b6240 RCX: 00007f276878e929 [ 567.176460][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 567.184461][ T31] RBP: 00007f2768810b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.192486][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.200501][ T31] R13: 0000000000000000 R14: 00007f27689b6240 R15: 00007ffcd29b3068 [ 567.208603][ T31] [ 567.211726][ T31] INFO: task syz.1.2751:16456 blocked for more than 145 seconds. [ 567.219493][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 567.227154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.235864][ T31] task:syz.1.2751 state:D stack:26168 pid:16456 tgid:16454 ppid:14212 task_flags:0x400040 flags:0x00004004 [ 567.247849][ T31] Call Trace: [ 567.251135][ T31] [ 567.254079][ T31] __schedule+0x16f5/0x4d00 [ 567.258636][ T31] ? __kasan_slab_free+0x62/0x70 [ 567.263588][ T31] ? security_file_open+0xb1/0x270 [ 567.268754][ T31] ? do_dentry_open+0x35e/0x1970 [ 567.273715][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.278641][ T31] ? schedule+0x165/0x360 [ 567.282995][ T31] ? __pfx___schedule+0x10/0x10 [ 567.287926][ T31] ? schedule+0x91/0x360 [ 567.292192][ T31] schedule+0x165/0x360 [ 567.296423][ T31] schedule_preempt_disabled+0x13/0x30 [ 567.301914][ T31] __mutex_lock+0x724/0xe80 [ 567.306473][ T31] ? __mutex_lock+0x51b/0xe80 [ 567.311166][ T31] ? misc_open+0x51/0x330 [ 567.315551][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 567.320602][ T31] misc_open+0x51/0x330 [ 567.324764][ T31] chrdev_open+0x4cc/0x5e0 [ 567.329237][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.334205][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.339192][ T31] do_dentry_open+0xdf3/0x1970 [ 567.343980][ T31] vfs_open+0x3b/0x340 [ 567.348080][ T31] ? path_openat+0x2ecd/0x3830 [ 567.352858][ T31] path_openat+0x2ee5/0x3830 [ 567.357495][ T31] ? arch_stack_walk+0xfc/0x150 [ 567.362380][ T31] ? __pfx_path_openat+0x10/0x10 [ 567.367351][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.373440][ T31] do_filp_open+0x1fa/0x410 [ 567.377996][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.382860][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 567.387940][ T31] ? _raw_spin_unlock+0x28/0x50 [ 567.392809][ T31] ? alloc_fd+0x64c/0x6c0 [ 567.397184][ T31] do_sys_openat2+0x121/0x1c0 [ 567.401875][ T31] ? __se_sys_futex+0x36f/0x400 [ 567.406772][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.411991][ T31] ? rcu_is_watching+0x15/0xb0 [ 567.416848][ T31] __x64_sys_openat+0x138/0x170 [ 567.421715][ T31] do_syscall_64+0xfa/0x3b0 [ 567.426266][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.431521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.438074][ T31] ? clear_bhb_loop+0x60/0xb0 [ 567.442803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.448786][ T31] RIP: 0033:0x7f4b1a18e929 [ 567.453216][ T31] RSP: 002b:00007f4b1afbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.461662][ T31] RAX: ffffffffffffffda RBX: 00007f4b1a3b5fa0 RCX: 00007f4b1a18e929 [ 567.469683][ T31] RDX: 0000000000000002 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 567.477708][ T31] RBP: 00007f4b1a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.485795][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.493782][ T31] R13: 0000000000000000 R14: 00007f4b1a3b5fa0 R15: 00007fff09e8bec8 [ 567.501921][ T31] [ 567.504970][ T31] INFO: task syz.1.2751:16457 blocked for more than 145 seconds. [ 567.512959][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 567.520928][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.529654][ T31] task:syz.1.2751 state:D stack:28328 pid:16457 tgid:16454 ppid:14212 task_flags:0x400040 flags:0x00004004 [ 567.541668][ T31] Call Trace: [ 567.544955][ T31] [ 567.548192][ T31] __schedule+0x16f5/0x4d00 [ 567.552741][ T31] ? __kasan_slab_free+0x62/0x70 [ 567.557783][ T31] ? security_file_open+0xb1/0x270 [ 567.562922][ T31] ? do_dentry_open+0x35e/0x1970 [ 567.567959][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.572832][ T31] ? schedule+0x165/0x360 [ 567.577222][ T31] ? __pfx___schedule+0x10/0x10 [ 567.582103][ T31] ? schedule+0x91/0x360 [ 567.586400][ T31] schedule+0x165/0x360 [ 567.590576][ T31] schedule_preempt_disabled+0x13/0x30 [ 567.596105][ T31] __mutex_lock+0x724/0xe80 [ 567.600619][ T31] ? __mutex_lock+0x51b/0xe80 [ 567.605352][ T31] ? misc_open+0x51/0x330 [ 567.609707][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 567.614911][ T31] misc_open+0x51/0x330 [ 567.619136][ T31] chrdev_open+0x4cc/0x5e0 [ 567.623576][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.628558][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.633515][ T31] do_dentry_open+0xdf3/0x1970 [ 567.638351][ T31] vfs_open+0x3b/0x340 [ 567.642433][ T31] ? path_openat+0x2ecd/0x3830 [ 567.647245][ T31] path_openat+0x2ee5/0x3830 [ 567.651857][ T31] ? arch_stack_walk+0xfc/0x150 [ 567.656908][ T31] ? __pfx_path_openat+0x10/0x10 [ 567.661862][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.668047][ T31] do_filp_open+0x1fa/0x410 [ 567.672582][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.677633][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 567.682709][ T31] ? _raw_spin_unlock+0x28/0x50 [ 567.687735][ T31] ? alloc_fd+0x64c/0x6c0 [ 567.692275][ T31] do_sys_openat2+0x121/0x1c0 [ 567.697057][ T31] ? __se_sys_futex+0x36f/0x400 [ 567.701930][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.707186][ T31] ? rcu_is_watching+0x15/0xb0 [ 567.711971][ T31] __x64_sys_openat+0x138/0x170 [ 567.716935][ T31] do_syscall_64+0xfa/0x3b0 [ 567.721464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.726721][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.732816][ T31] ? clear_bhb_loop+0x60/0xb0 [ 567.737545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.743466][ T31] RIP: 0033:0x7f4b1a18e929 [ 567.747942][ T31] RSP: 002b:00007f4b1af9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.756911][ T31] RAX: ffffffffffffffda RBX: 00007f4b1a3b6080 RCX: 00007f4b1a18e929 [ 567.764905][ T31] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 567.772928][ T31] RBP: 00007f4b1a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.781053][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.789079][ T31] R13: 0000000000000000 R14: 00007f4b1a3b6080 R15: 00007fff09e8bec8 [ 567.797129][ T31] [ 567.800169][ T31] INFO: task syz-executor:16464 blocked for more than 145 seconds. [ 567.809610][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 567.817305][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.826018][ T31] task:syz-executor state:D stack:28008 pid:16464 tgid:16464 ppid:1 task_flags:0x400040 flags:0x00004000 [ 567.838338][ T31] Call Trace: [ 567.841637][ T31] [ 567.844570][ T31] __schedule+0x16f5/0x4d00 [ 567.849251][ T31] ? __kasan_slab_free+0x62/0x70 [ 567.854229][ T31] ? security_file_open+0xb1/0x270 [ 567.859405][ T31] ? do_dentry_open+0x35e/0x1970 [ 567.864364][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.869268][ T31] ? schedule+0x165/0x360 [ 567.873634][ T31] ? __pfx___schedule+0x10/0x10 [ 567.878571][ T31] ? schedule+0x91/0x360 [ 567.882835][ T31] schedule+0x165/0x360 [ 567.887193][ T31] schedule_preempt_disabled+0x13/0x30 [ 567.892668][ T31] __mutex_lock+0x724/0xe80 [ 567.897232][ T31] ? __mutex_lock+0x51b/0xe80 [ 567.901933][ T31] ? misc_open+0x51/0x330 [ 567.906317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 567.911366][ T31] misc_open+0x51/0x330 [ 567.915634][ T31] chrdev_open+0x4cc/0x5e0 [ 567.920079][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.925025][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 567.930036][ T31] do_dentry_open+0xdf3/0x1970 [ 567.934849][ T31] vfs_open+0x3b/0x340 [ 567.939001][ T31] ? path_openat+0x2ecd/0x3830 [ 567.943791][ T31] path_openat+0x2ee5/0x3830 [ 567.948422][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 567.953888][ T31] ? count_memcg_event_mm+0x21/0x260 [ 567.959245][ T31] ? __pfx_path_openat+0x10/0x10 [ 567.964219][ T31] ? __pfx___up_read+0x10/0x10 [ 567.969040][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 567.974362][ T31] do_filp_open+0x1fa/0x410 [ 567.978917][ T31] ? __lock_acquire+0xab9/0xd20 [ 567.983784][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 567.988862][ T31] ? _raw_spin_unlock+0x28/0x50 [ 567.993734][ T31] ? alloc_fd+0x64c/0x6c0 [ 567.998598][ T31] do_sys_openat2+0x121/0x1c0 [ 568.003307][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.008546][ T31] ? fd_install+0x97/0x540 [ 568.012986][ T31] ? fd_install+0x30d/0x540 [ 568.017562][ T31] __x64_sys_openat+0x138/0x170 [ 568.022435][ T31] do_syscall_64+0xfa/0x3b0 [ 568.026983][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.032201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.038325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 568.043019][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.048944][ T31] RIP: 0033:0x7f3b89f8d211 [ 568.053372][ T31] RSP: 002b:00007ffe6b30bd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 568.061860][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3b89f8d211 [ 568.069875][ T31] RDX: 0000000000000002 RSI: 00007f3b8a011506 RDI: 00000000ffffff9c [ 568.077916][ T31] RBP: 00007f3b8a011506 R08: 0000000000000000 R09: 00007f3b8aced6c0 [ 568.085949][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 568.093939][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 568.101980][ T31] [ 568.105013][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 568.114305][ T31] [ 568.114305][ T31] Showing all locks held in the system: [ 568.122137][ T31] 1 lock held by khungtaskd/31: [ 568.127029][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 568.136926][ T31] 3 locks held by kworker/1:1/43: [ 568.141959][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 568.152974][ T31] #1: ffffc90000b37bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 568.166576][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 568.177994][ T31] 3 locks held by kworker/1:2/2157: [ 568.183213][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 568.194241][ T31] #1: ffffc9000525fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 568.206675][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 568.216909][ T31] 2 locks held by kworker/u8:8/4430: [ 568.222213][ T31] 2 locks held by getty/5601: [ 568.226940][ T31] #0: ffff88803565a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 568.236751][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 568.246921][ T31] 1 lock held by syz-executor/10255: [ 568.252210][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 568.262356][ T31] 2 locks held by syz.4.2746/16181: [ 568.267588][ T31] #0: ffff888078e69100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 568.277398][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 568.287547][ T31] 3 locks held by syz.4.2746/16190: [ 568.292739][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.301240][ T31] #1: ffff888056111100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 568.310875][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 568.320864][ T31] 2 locks held by syz.3.2750/16424: [ 568.326281][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 568.336460][ T31] #1: ffff888078e69100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 568.346215][ T31] 1 lock held by syz.3.2750/16460: [ 568.351350][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.359879][ T31] 1 lock held by syz.1.2751/16456: [ 568.364997][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.373524][ T31] 1 lock held by syz.1.2751/16457: [ 568.378671][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.387198][ T31] 1 lock held by syz-executor/16464: [ 568.392487][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.400977][ T31] 1 lock held by syz-executor/16467: [ 568.406323][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.414809][ T31] 1 lock held by syz-executor/16470: [ 568.420133][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.428651][ T31] 1 lock held by syz-executor/16471: [ 568.433921][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.442579][ T31] 1 lock held by syz-executor/16483: [ 568.447918][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.456433][ T31] 1 lock held by syz-executor/16485: [ 568.461723][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.470234][ T31] 1 lock held by syz-executor/16488: [ 568.477766][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.487278][ T31] 1 lock held by syz-executor/16489: [ 568.492577][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.501094][ T31] 1 lock held by syz-executor/16499: [ 568.506472][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.515893][ T31] 1 lock held by syz-executor/16501: [ 568.521187][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.529666][ T31] 1 lock held by syz-executor/16504: [ 568.534961][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.543459][ T31] 1 lock held by syz-executor/16505: [ 568.548786][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 568.557328][ T31] [ 568.559659][ T31] ============================================= [ 568.559659][ T31] [ 568.568153][ T31] NMI backtrace for cpu 1 [ 568.568173][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 568.568193][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.568204][ T31] Call Trace: [ 568.568211][ T31] [ 568.568217][ T31] dump_stack_lvl+0x189/0x250 [ 568.568239][ T31] ? __wake_up_klogd+0xd9/0x110 [ 568.568266][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.568286][ T31] ? __pfx__printk+0x10/0x10 [ 568.568317][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 568.568344][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 568.568365][ T31] ? _printk+0xcf/0x120 [ 568.568388][ T31] ? __pfx__printk+0x10/0x10 [ 568.568409][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 568.568438][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 568.568465][ T31] watchdog+0xfee/0x1030 [ 568.568483][ T31] ? watchdog+0x1de/0x1030 [ 568.568507][ T31] kthread+0x70e/0x8a0 [ 568.568533][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.568556][ T31] ? __pfx_kthread+0x10/0x10 [ 568.568581][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.568606][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.568631][ T31] ? __pfx_kthread+0x10/0x10 [ 568.568656][ T31] ret_from_fork+0x3f9/0x770 [ 568.568677][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 568.568700][ T31] ? __switch_to_asm+0x39/0x70 [ 568.568720][ T31] ? __switch_to_asm+0x33/0x70 [ 568.568740][ T31] ? __pfx_kthread+0x10/0x10 [ 568.568764][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.568799][ T31] [ 568.568806][ T31] Sending NMI from CPU 1 to CPUs 0: [ 568.726136][ C0] NMI backtrace for cpu 0 [ 568.726150][ C0] CPU: 0 UID: 0 PID: 4430 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 568.726168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.726178][ C0] Workqueue: events_unbound toggle_allocation_gate [ 568.726202][ C0] RIP: 0010:match_held_lock+0x0/0xc0 [ 568.726217][ C0] Code: 41 5e 41 5f e9 c1 ca 02 00 cc e8 fb f8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 [ 568.726231][ C0] RSP: 0018:ffffc9000d8af7f0 EFLAGS: 00000087 [ 568.726243][ C0] RAX: 0000000000000005 RBX: ffff888033726568 RCX: ebaf2e6aef104500 [ 568.726253][ C0] RDX: ffff888033725a00 RSI: ffffffff8e1ea588 RDI: ffff888033726568 [ 568.726264][ C0] RBP: 00000000ffffffff R08: ffff88801a87b063 R09: 1ffff1100350f60c [ 568.726275][ C0] R10: dffffc0000000000 R11: ffffed100350f60d R12: 0000000000000246 [ 568.726285][ C0] R13: ffff888033725a00 R14: ffffffff8e1ea588 R15: 0000000000000003 [ 568.726295][ C0] FS: 0000000000000000(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 568.726307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.726316][ C0] CR2: 000056365d2885a0 CR3: 000000000e138000 CR4: 00000000003526f0 [ 568.726329][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.726337][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.726347][ C0] Call Trace: [ 568.726353][ C0] [ 568.726358][ C0] lock_is_held_type+0xa8/0x190 [ 568.726373][ C0] smp_text_poke_batch_finish+0xcaf/0x1100 [ 568.726398][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 568.726425][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 568.726452][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 568.726474][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 568.726494][ C0] static_key_enable+0x1a/0x20 [ 568.726511][ C0] toggle_allocation_gate+0xad/0x240 [ 568.726529][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 568.726547][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 568.726567][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 568.726582][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 568.726598][ C0] process_scheduled_works+0xae1/0x17b0 [ 568.726623][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 568.726645][ C0] worker_thread+0x8a0/0xda0 [ 568.726662][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 568.726687][ C0] ? __kthread_parkme+0x7b/0x200 [ 568.726707][ C0] kthread+0x70e/0x8a0 [ 568.726727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 568.726743][ C0] ? __pfx_kthread+0x10/0x10 [ 568.726762][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.726782][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.726803][ C0] ? __pfx_kthread+0x10/0x10 [ 568.726822][ C0] ret_from_fork+0x3f9/0x770 [ 568.726837][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 568.726853][ C0] ? __switch_to_asm+0x39/0x70 [ 568.726872][ C0] ? __switch_to_asm+0x33/0x70 [ 568.726889][ C0] ? __pfx_kthread+0x10/0x10 [ 568.726908][ C0] ret_from_fork_asm+0x1a/0x30 [ 568.726939][ C0] [ 568.727476][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 568.727493][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 568.727517][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.727531][ T31] Call Trace: [ 568.727539][ T31] [ 568.727548][ T31] dump_stack_lvl+0x99/0x250 [ 568.727576][ T31] ? __asan_memcpy+0x40/0x70 [ 568.727597][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.727621][ T31] ? __pfx__printk+0x10/0x10 [ 568.727657][ T31] panic+0x2db/0x790 [ 568.727689][ T31] ? __pfx_panic+0x10/0x10 [ 568.727707][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 568.727736][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 568.727767][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 568.727801][ T31] watchdog+0x102d/0x1030 [ 568.727824][ T31] ? watchdog+0x1de/0x1030 [ 568.727850][ T31] kthread+0x70e/0x8a0 [ 568.727881][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.727899][ T31] ? __pfx_kthread+0x10/0x10 [ 568.727929][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.727957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.727987][ T31] ? __pfx_kthread+0x10/0x10 [ 568.728014][ T31] ret_from_fork+0x3f9/0x770 [ 568.728037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 568.728064][ T31] ? __switch_to_asm+0x39/0x70 [ 568.728088][ T31] ? __switch_to_asm+0x33/0x70 [ 568.728112][ T31] ? __pfx_kthread+0x10/0x10 [ 568.728140][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.728180][ T31] [ 569.179362][ T31] Kernel Offset: disabled [ 569.183691][ T31] Rebooting in 86400 seconds..