last executing test programs: 28m0.471685879s ago: executing program 2 (id=2296): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x4020940d, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0x7c6, 0xca202) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x103, 0x1, {0x4, 0x1, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x7, 0x2, 0x1000, &(0x7f0000789000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x4, 0x8080000, 0x2000, &(0x7f0000787000/0x2000)=nil}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 28m0.32049813s ago: executing program 2 (id=2297): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe8d) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 28m0.134734761s ago: executing program 2 (id=2300): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dffb000) 27m59.976227863s ago: executing program 2 (id=2301): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0xd000, 0x398000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) 27m59.959520423s ago: executing program 2 (id=2302): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a300, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000200)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x36314247}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x4301, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)={0x0, @reserved}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x140, 0x12) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 27m59.604774435s ago: executing program 2 (id=2305): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x21) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x21) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) (async) 27m44.112859031s ago: executing program 32 (id=2305): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x21) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x21) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) (async) 24m51.968669267s ago: executing program 0 (id=3753): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0xffffffff}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00', 0x4000}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0x40000000, 0x0, 0x1ff}}) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x10000}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r4, 0xfffff000, &(0x7f0000000000)) (async, rerun: 64) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async, rerun: 64) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/stat\x00', 0x0, 0x0) (rerun: 64) lseek(r6, 0x0, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f00000000c0)={{0x0, 0x1}, 'port1\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x5423, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async, rerun: 32) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x35315241}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) (async) mmap(&(0x7f0000d74000/0x1000)=nil, 0x1000, 0x7, 0x50, 0xffffffffffffffff, 0xd6e18000) 24m51.603515519s ago: executing program 0 (id=3755): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/144, 0x90) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000001900), 0x0, 0x40) ioctl$I2C_RETRIES(r2, 0x701, 0xfffffffffffffff8) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 24m51.412442981s ago: executing program 0 (id=3758): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100)=ANY=[]) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x8001) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r4, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1a5e00}) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 24m50.716085508s ago: executing program 0 (id=3762): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x40043d14, &(0x7f0000000440)) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x4, 0x2, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x9}], 0x3}}}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000001c0)={0xc}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x5, 0x6) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0xa}) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000001100)={0x8, r4}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x4) 24m50.587851397s ago: executing program 0 (id=3763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20001, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20000000000) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x17}]}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@my=0x0, 0xffff}, 0x1, 0x1, 0xbf1}) (async) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r7, 0x4068aea3, &(0x7f00000002c0)) (async) preadv(r6, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) close(r6) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8000000000000000) 24m50.151934137s ago: executing program 0 (id=3768): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 24m34.884259442s ago: executing program 33 (id=3768): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 24m17.908393477s ago: executing program 1 (id=3945): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000000201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) read$FUSE(r1, 0x0, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) (async) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 24m13.040280827s ago: executing program 1 (id=3972): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0xffff, r0, &(0x7f0000000080)=0x1000, 0x1, 0x0) (async) preadv(r0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/139, 0x8b}], 0x3, 0x8, 0x5) (async) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000001280)=""/48, 0x30}, {&(0x7f00000012c0)=""/246, 0xf6}, {&(0x7f00000013c0)=""/12, 0xc}, {&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/118, 0x76}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/173, 0xad}, {&(0x7f00000016c0)=""/147, 0x93}], 0x8, 0x5, 0x3) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000001800)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000018c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000003900)={0xa0, 0x0, r3, [{0x0, 0x2, 0x18, 0x0, '/proc/self/attr/current\x00'}, {0x3, 0x3ff, 0x18, 0x6, '/proc/self/attr/current\x00'}, {0x1, 0x7fff, 0x18, 0x8001, '/proc/self/attr/current\x00'}]}, 0xa0) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000039c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000003a00)=r4) (async) r5 = syz_open_dev$audion(&(0x7f0000003a40), 0x6, 0x24002) read$FUSE(r5, &(0x7f0000003a80)={0x2020}, 0x2020) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) (async) ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f0000005ac0)={0x0, 0x8}) (async) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000005b00)) (async) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000005b40)={0xffff, 0x5, 0x100, 0x1}) (async) write$uinput_user_dev(r5, &(0x7f0000005b80)={'syz0\x00', {0x6, 0x25, 0x9, 0x1}, 0x20, [0x9, 0x3, 0x6, 0xe, 0x5, 0x5, 0x7ff, 0x0, 0x1, 0x1, 0x1, 0x9, 0x9, 0x0, 0xffffffff, 0x5, 0x4, 0x0, 0x9, 0x80, 0x4, 0xd7dc, 0x677100, 0xea7, 0x8, 0x8, 0x3, 0x3, 0x4, 0x401, 0x533a, 0xffffff63, 0xc5, 0x10100, 0x3, 0x5, 0x2, 0x4, 0x8, 0x400, 0x0, 0x4, 0x8, 0x7, 0x3ff, 0x0, 0x1, 0x240, 0xc9, 0x0, 0x0, 0x9a, 0x4, 0x6, 0xfffffff8, 0x4, 0x3f3a, 0xa0, 0x0, 0x145, 0x4, 0x3, 0x80, 0x7], [0x3, 0x5, 0x401, 0x7, 0x1, 0x2, 0x6, 0x38a, 0x3, 0x8, 0x59af, 0xffffff14, 0x0, 0x98, 0x8001, 0x5, 0x5, 0x5, 0x436, 0x80000001, 0x2000, 0x4, 0x2, 0x5, 0x2, 0x0, 0x7, 0xa89, 0xc, 0x0, 0x80000001, 0x7621b7ea, 0x9, 0xfffffffa, 0xf4d, 0x7, 0x8, 0x28, 0x3, 0x0, 0xb6a, 0x6, 0xbbf, 0x0, 0x6, 0x7fff, 0x8, 0x6, 0x3, 0xa, 0x0, 0x2, 0x8, 0x8001, 0x80, 0x9, 0x6, 0x10001, 0x4a35, 0x2, 0xf61, 0x9, 0x81, 0xfffffffb], [0xf, 0x80000000, 0x9, 0x61, 0x543, 0x6, 0x9, 0xca4, 0x7, 0x0, 0x1, 0xfff, 0x4, 0x5, 0x3, 0x1, 0x2, 0x9, 0x6, 0x401, 0x4, 0x5, 0x3fffc000, 0xce5, 0x9, 0xdc57, 0x3, 0x2e, 0x1, 0xffffffff, 0x3, 0x2, 0xfe, 0x6, 0x7f, 0x249d, 0x2, 0x6f, 0x800, 0x1, 0xa31, 0x4, 0x2, 0x2, 0x100, 0x0, 0x2, 0x7ff, 0x3, 0x6, 0x4, 0x83e, 0x7, 0x80, 0xa, 0x4, 0x5, 0x80000000, 0x85b, 0xff, 0x4, 0x2, 0x8, 0x6], [0x4, 0x9dcc, 0x3, 0x4, 0xfffffffc, 0x1, 0x8, 0x1, 0x4, 0x97d, 0xfff, 0x9, 0x4, 0x4, 0x2, 0x1000, 0x7, 0x8, 0x6, 0x7, 0x2, 0x0, 0x9, 0x4, 0xfff, 0xffff, 0x3, 0x6, 0x0, 0x7, 0x10000, 0x6645, 0x401, 0xa, 0x3, 0x7, 0xffffffff, 0xb7c, 0x6, 0x6, 0x2, 0x5, 0x9, 0x1, 0x6, 0x2, 0x9, 0x80000001, 0x8000, 0xf7, 0x1, 0xffffbd53, 0x7, 0x2, 0xffff, 0x4, 0x80, 0x7, 0x73784613, 0x0, 0x29, 0xa, 0x5, 0x4]}, 0x45c) (async) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000006000)={0xfff, 0x1, 0x1}) ioctl$KVM_SMI(r1, 0xaeb7) r6 = syz_open_dev$midi(&(0x7f0000006040), 0x80000000, 0x40) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000006080)) (async) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000060c0)) syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1e, 0x101400) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) preadv(r6, &(0x7f0000007340)=[{&(0x7f0000007100)=""/7, 0x7}, {&(0x7f0000007140)=""/51, 0x33}, {&(0x7f0000007180)=""/143, 0x8f}, {&(0x7f0000007240)=""/226, 0xe2}], 0x4, 0x9, 0x8000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000007380)={{0x1, 0x1, 0x18, r5, {0xffff0000}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000007440)={0x18, 0x0, 0x2, 0x0, &(0x7f0000007400)=[{0xa, 0x7}, {0x18a40000000, 0x100000000}]}) 24m12.960872396s ago: executing program 1 (id=3974): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8241, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 24m12.744143884s ago: executing program 1 (id=3975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read(r0, &(0x7f00000001c0)=""/166, 0xa6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8e, 0x7, 0x4, 0x1, 0x80, 0x3, 0xffffffffffffffff, 0x7, 0x6fd9, 0x0, 0x1000, 0x7, 0x8, 0x0, 0x6, 0x33c6], 0xd000, 0x210}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x5, 0x8, 0x1, 'queue0\x00', 0x2d}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 24m12.576252389s ago: executing program 1 (id=3976): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000ce0a0000000000000800000000000000b30900000000000006000000000000008a0900000000000004000000000000002903000000000000090000000000000007030000000000000300000000000000000300000000000006000000000000000402000000000000450000000000000050b56c25452e6bd20f428fdc584a426d8b0b3ec2cef79b244559a3559695c63cbb8974838f1129c620a8fc82c98af40082b05fc432acd2390a4f8cad124c4467845e7e"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0xffffd000) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x5) 24m12.499276327s ago: executing program 1 (id=3977): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/151, 0x97}, {&(0x7f0000001380)=""/56, 0x38}, {&(0x7f00000013c0)=""/32, 0x20}], 0x7, 0x6, 0x800) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480), 0x200000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000014c0)={r0, 0x4, 0x9, 0x9}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001500)={{r2}, "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"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002500), 0x10003) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000002540)={0x6, r0, 'id0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000025c0)={0x2, 0x800000000}) pwritev2(r0, &(0x7f00000038c0)=[{&(0x7f0000002600)="ab8e633628c6dfdc6192dee6177843f39f66b334476645cd1bd6fd8a0d1f27643a262ad2e216f5ec414fb96f9d1a97dbea3e5681fa8013394278e53ad8483673", 0x40}, {&(0x7f0000002640)="f2175098fb191d7b926253cc72c05e84d818dd749dada6c64535ebfe6b212eebefff84d204b028b0a65487205278cad1d7585706938a94b0dd674a0a085d743d2392f7813f40d55f706c40922475e4aca2ea1cccf9287ec8bca3dbd616785c8dddd948f9ed75c8ab8251abdb981945d19a0464292cd42a3606720980001b287140a62cf0c4e5ea8a871ebf39e348e995bfcbd6624f2604514de3cf39995830939df86480c115edb095427820593c457349427aef83e5665cd102037e0686f345716addb92f0bac51e0ec374cba1b4b41e56adfb402d4cd02a9f8f7d3677ed080a6db062a9e3240dd24", 0xe9}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="6596ce61602d9328a33ebed085f3e60a024665a26c800dbae7babd516de5c7ab0ea78380a40f26df5300d1c24f5da5c180519d1bd85bb6e8f7ef9cde8fb730be308c2416d5ddc3466aa223907efd818e5d7da36d7ac6e0e59c232f62f715c8f9ec1a8b9e7d149fbf663107a437d3943acf11d275d5a8ee31cce708019725dd01409e842cdb79118ef935b215f28968e1abd2d0fad17af1b5f71b95fac54ebfbc355c4297bf28b00c2ba682b97fb4b80db48a52056ea8b18b7329bef2c1df0838e4110ee6676d2c864efd1eea3da49e4c", 0xd0}, {&(0x7f0000003840)="1d76f2e51c59e7eb9b5ee0870d01709032c3c5b3f28e18c47d10f02d2c", 0x1d}, {&(0x7f0000003880)="8925ce70e3d07eacbe6fa0222a50", 0xe}], 0x6, 0x69, 0xffffffc0, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000003940)=@arm64={0x2, 0x8, 0x17, '\x00', 0x80000001}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000003980)) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000039c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000003c80)={&(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003b00)=[{}, {}, {}], &(0x7f0000003c00)=[0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000003d80)={0x0, 0x2, &(0x7f0000003a40)=[0x0, r6], &(0x7f0000003a80)=[0xf4c3, 0x29ef, 0xd, 0x5, 0x8595, 0x7], &(0x7f0000003d00)=[r7], &(0x7f0000003d40)=[0x1691, 0x0], 0x0, 0x5}) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000003dc0)={0xdddd1000, 0x1000}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r8) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x7000)=nil}) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000003e40)=""/94) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003ec0), 0x440041, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000003f00)={0x1, 0x4f}) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000003f40)={0x1, 0x8, 0xb32, 0x2c8, 0x6, "86e67f360a53788f0ad2288a233ea77141ebe6", 0xa000, 0x40}) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r8, 0xd6b73000) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, &(0x7f0000004180)={0x7, 0x9, 0x1, 0xdd, &(0x7f0000003f80)=""/221, 0x95, &(0x7f0000004080)=""/149, 0x36, &(0x7f0000004140)=""/54}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000004200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000041c0)}) 23m57.132607004s ago: executing program 34 (id=3977): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/151, 0x97}, {&(0x7f0000001380)=""/56, 0x38}, {&(0x7f00000013c0)=""/32, 0x20}], 0x7, 0x6, 0x800) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480), 0x200000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000014c0)={r0, 0x4, 0x9, 0x9}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001500)={{r2}, "97784cc673a5f9212534650712e653cb7c33a74254b76ee2f41c0d6e333f69e67662d7b20172f874c2c0125a013de9397191eee0140e260e5ee9f98e05dfdac6287d9614d60410cd8c67f269ab5d9b740ac6cbfc1c798f4882d204b5dad84bbb1541a86e9a077fd38a735d902607fb9d31ccdd1a8682620e9946a60026b581a52a9137f8570cf0ed06f48bdd4a8ccb663f726faa41099e785890b90723703b522e17f64afc6afea663ee248f1eacdb122c3360de14133d66683ea293f3e6d84aa7e25c4729d28b2d5a795fa17bf1ed60d4d76be6b5a5ac0bb36eb7f70873d32a3117a00298e959706838c2f23b28424070d4b0599c25a060cd55ee990c97592fd6b3eea217bfe783e710115249429da9e2d250b5224d39d3f083fc65582b77e8c25a3c0411b080973b4fa712841324fcf659b03114ce9a7cfeb83500decc8596fadc18a9940232a8c9daa4a268ad789069b4c9fdbaf470c26171a16f3d6836a86a8c9417a093a889476515b0c03d88c0d2770b9212b17350f3341810d6f051260e586d6d87d74f1a86e6cbf26f55bf11ac7636c3fdde10a67211065e3c81efa01d7cbd40503483e1e9d6755caf7d16422c3d82a3c8b8bbfa3f7ef9fab81e4dbf21c2bed4154bcb3aa9729537d1e4ccd6c4c550a068b139d77037ba5a31497935cb01aa769b916d2b3d1117f2ce9a89cb2c19ee45e410e9f8ca4696a8f5a36607e4c36ff0ca94da8e778423f47dda1c5028b99583ade8b914b88114cdb98f46013d0a6a5ea45a9fb6f3e985f0273e9526701199a8f964c57a43ecf912cf7e8e954f3be76899b9adde94a6ba848f7fe23f7cf72713d871b53bd4acd2b0fe07240f09b57b3ca3b31595f7c778b4569134b3db12cee8ce0e759ca554d449ef2a24fe22a9290d040b263610058f1a4ec02ac2b7fd39827bade5ae048075d1d1491ce78f438a0dc80dac9d0e657ab1bcd8f6f967e979dabae07d06b4ee8b4f34fa392c83d4ac1dab478b456e9d0f2002b4bb7e8bffdc4557785a64814f73bbed5389f668fbbea7ac599f3fccfc1504e7fcafb9a73bacec803a09c6bcf7193a6309edb7e32363eaafe3b74de6eed6b554d1b6923a45a1830408fa42cd191716db5524c4328500be563916148e17228fbfa7ef1ad9a8f01f0450655324abe18d63fb68c73d1013319153d52eb305df353a11beff690094838d39197a33833fc61ce9afb8f36a9a3fd2bff59c4ce5ff1cf39bb006e25a6b9d8adc860619f32cd0dfcd79f70d1817e0984ea5b0eb4c66595c13261b57d3db3edc9f8724ef46066ee6d357249fd0a7cd84ad55af89a822dd7e49da859c5840450138d00d0eb0d5b819f3816186fb00196d6269c46cca9e4c8dbdba0ba48f67bfcf1e987e7a87ade61153dacad7f96c641ca692e14b4d41e211ac65366c9fbfbb85bd001251d25b5186d69dcd36657cfd21031bf39c3153c8b8794c19f566c72ca26adef7cce0e98fd3a190d755f919b6cfcf43a4b56251e9fba72ce989822569708f10874b487153d839dcbb1c841f8cb1727ca3643b9eaf28edc695e02c56f8427a4b9f7549aed5d9a018a3c2d8f05f1867c891ff5778bda03939d77188ee47288cd4ad1e60b3b9ab399ded104cb90ff72a927af09ee4540f75f4e909a7c010445ec8e99de55f35d7eba875563f3b74f8897d1ccba9cb96edc813d41cc6e37f3f39e92a5b5b5920e4a359e33a1895e3f817cdc7d486642b494ea65d7354e3ce28e2ff0e1840138e76b1bbddb5ce9d6ccbf555a98309a1fba73b1692c7107be81102559661c01f132c2d94f579f7ad87c8325a0e77cc8318297cd004b6af3f36dd9e09d0e1288088c2f1a5cfeea28372732daf4d94db00eb438e201cd6313e702f2934c4f4291e3e3d859e95e4472ad2c30fcfdd83604d595088f384f6c871a0c6ba38389a7e7601b915a4aab9441605dcfac7328d4cff02a68f3352e8635bf46713aa95aa166e5313c5fd6c5d724744803ea063c440ef73609a547796016cbd605d7db725d12c4850773c31fa1cd951641a8c7cee7c1b994796ea1176ebc3c8ad1204b1a00b6fe77f9c81063fb606b63f34d635105b774dbc94a93c3ea6b520c07f1de7bb015744f9c345b4758a347c1cce93eb5b7f996fa19ccd12b0900d790b531a44ef8a7788cefe5fb5626ede009667b1de3f839e9e5c06b3314eba3cafbf993f68bf4c859d0babdd56ffb6c9ad994662769a80750e457dfd495f566152910cab2ad441c1113e1e59f81543955b17c10a7f12350c30eba2bb0b35a402b08fc32221afdeb2d32fed5529ea73c592a3e2add569ee462e7b052f9a108070b96fbbf1931276dbd2a43667884c021a2ac4aab760f8fc006afb3fae86ef82dcb7d491c5ecac3694c8ac3d5670fbb58e1d30dc01e2f3c3815535170c1c5d50151cccafb901c59d51f43a5f3aadea674adb3075a3030918c81020b974f38f2dfe2e4213e1f596c31522865982ba88f7b5ad4a53f90d869f5666b9edad4e5c369b79dae5b730d0bab4715b4a122352eb0405038970e5edba206551e2d37b7c46ee1d3a80920d3a99a48341b6eaed49e49d35c78d6014ef2478ceebb20851abe385f18f98547bb6ad0eebc0015ab217fcc22c47e6b52f33763c684c55b02108902ca75d6d586b403148385e80983502e22bcbe2ead299ed33f6dc4ffff10bd92aa9a231adb28ffdea77091f20d51d3c93f3e4e71f08866f13611f61c5523eba8a734953f86fab89173b3def99d593ce1954a0c7a46e494df98fe5509fc14d386d5555d868149c6069c43a6adac1c6607456f21694e2474dc4a0f7846eb22210465cb2eedb0b4d1a776bdbd61d25d165d6727e6ce376a636863775bddbd018bcf5b5150ac70a1fdfb2e8a7ddf61fa76b3587ff936761a5adec54fc08465c890f15b4b217073b10f15da29f01d2e8123282fd2d5211b6a269b2e66118ebf22894ff045db4e5741b164668719231677ddcdf5fa2bf2384b0fa501db0888d140b432476ce80622aa5b9abfe0b67ac0a1390e791c20f0f4b98efdecfa53f11b1e6ef3f92eb64225291e673d002872d56f1c2a2d743e893234d1072f8bd861d6a34739ee585f0934adcc73124a03ebabd688150e58a0b5e7882e1954826e0aba40a37d1cae464e9c51e28ffcdbfd2a6c9acc0fefff937863e7d8aa6973f3f9a75d147d12ec6ad0728f4bd2997442eebf6ff252b70215da53c044a1ae1671b85a41553428e461032d023ddcb4ee4b2144bccce4a12e5f10caafde260081dbeea127df8815154af4d682743ffe08f5c42f346f159f0e527ba0a4428b96ec25876c5784030b0404133064c667ed46dbb9aa57b2049ac4eb0aef3fabb6dac225f3f80c3b377593a887754546bafc178fb9bb166f6472a7957f0471860da104fee3b27875a7e04cb43a11c86329461115b29fffbcb8d745978c53641b55e41bcb58f7e01d5479467db3d0edafa1f5eb8bee1cf823136cb2d6ca6c37d52049971f5eedbc6f9adf743f764c9b8b42acea6a679e0a7ec639cacce3683b3511edc1dbfc4b1a2d66aa030a7ea153b6702afb76014b7b1653ab515e5b58e97071f49f8098129b0899875c419cd51c51c8558d100f018722fa8e255eb7e7b1d1d6db09f8474618439239feb4e05a80a67a79a73f87fb073f24e7368e89194b6ece3f765fd0e65048c4d0cdfc0330825bc949544e07e472b4eb2af1d23b8da3cd29df392488cb36170d65eb716bbcdd2ada3148a187ee7ecf93b77eda1e91d0141bfabc9be5825c07babfa41819300387502791222d74d5a0957ab57dcf943853818f579fc4e5293facfea293eede14d881ed0d4ee1c0d5be134ea548a5fee092a17cfe745d2ec12a7a8044b8f964b7c295110011d00026bad8a70065243fcb99784cf0db7585fd0e67e4e01cf21c869262221634a15b67445aead89c4ca3726ae60bf36d4ca492b4f4bc0a6a82f9255c82cc087b3c7e9ab016f238122924f325b64ac397ca5fa5043f98c473eb09ca31dea2c82464d212182391dd7718c8332b1ffe6d90d6d51f7452014216f108652e083272651f30e8a2ffd6e6985fc37523f9efbb0c984939b6eddf8bf50f3dbb7072181a6a6945881ac83bc50c3c0b9b032b5c1d2742bfbdf6d4b8f273a0a116001224e070cb19e161a6c9021fb8bd729f2e3c5d289e84f8e8aba97ec8be346a9040d86b014a2c973dca61e9bd831e89cba34402f136ee0c1d33a6f72cbdeb459b8ec90cb83f639e25ad1225c3bd7afab573aa1ff3c45875ceab256b3a76fc92e4df8952b37b7532a5d5bd8c7c705637ec868dfd6f3c9168bbbda1589c6d3a531450d187e17a44d7b611b782c4d6bade55a629eb6768e8de358f8b31be5ec4a035c2a0a53b25d4ce7b3e0a65b7dc164eec2f907ec46f7f0f78b236ac4c187c8eb3561b647eec51fb632fb35fad6fda88e71297c31a77ba49723a5c28836d6c253d8986ffca1e2f6c3435132e33dcc11f824b7c1051b071892a54c6e0b566bcb2057cd28ba52259eee2ee1b378b9cec1fd43f8874b1671b52b64264b515504b094bd8728a550d0139e403ad8bba4651f1947f79fce3cc70439493b5e3457a5039540cebe58aefa5bdafc4a27105ce9e0f61863b64e23a8b6b48e5412a3ef3c1024aed04dc3d68aa091b4950932adebf501474372917a894a4dfa488416b4a852eb9c993ccdf20024f7c0a52f9fe8b4dcd04915f55e5103b7f423666608c298e8d7366b64bcb678fa3a6dc9ff055fe2a5e1872c37c2ab122e336601e2757c452b8b10e45d5201fd6c36a538ac2e8ff9ad774bf5978b1238f16f01f2a2de2a695370bb32b02ff99126a5074726e51a86091eb885d1eca29b323abcd0987094da702fe2513a07533c299bccc223df98d99e7c1f3ea73628a31ce30e430223893f20a1816b1ed83f24fbe529d28fd04e8d57f032b938f22ae46b827b39f928af801d273bc89e46629548b0bd058c21f51056364b02a13384aadac9258c72621b6d49e118676bc200c2bed0211e760e2ec765030873a2d6ab25192b4c4c829416f494f90fcdf4863343fc27f418e45c489c450d20ddc8503cd3c1f7322f18fa7e9d0e95bdd9e078548ae612c545c2a2e072443f11d86aa1013ed5e4ecc47da7752911f3da1c586e79ff3d8b8e3ec9a97bdfc4f4f3f0ba501c18882710bac17302342bf3846473ae305fb3528a7a1eef4ad84faed359e826be86747f9eba620bd2658a6648c3d8834aef83e51a632b1632f9c93229ea3d81ff4333b5be3686e56760c4d3ded68595fb47594fde433dd92131ce92cafd9dc653e4bc1f8aec5bc6a611e02f88a2b6d9d420a8afd3ad1d37f5c17842dffcceb94e7b28edfc2b10e28dc031ad0374bcf358229809aad9052b30dc6b8cda9fb38134b6ee22f76c6fcb12df5b238b3119f3a6bfc45965240727fa350ddcf1ae9c314d377d4663524d3b024b3286dcde36774b97adbe425a4074e45e9326f8732804210b3f7467d7e8b1def096f3105e9b402ca2cf897af6f72b926a2b58364caed2f8c44d37d412557d52ceca608d30bdad51410f48cd3f5aaa27de0475087ac2c5b1e853d7b9f082e18833af861a37169f9fb8c1e2489ec0c2ed77471192808584957822eae7fcd9a75c5e84da17863c3f7e6b79d9ee6a6415df15d810c9756298cdecb65b418022684375a28ac47b2c96577989c366b0d1754cb02f99b55a8f5975075a657f6c1eb21265f05b93190421f57716f4af200ba8bc2c3d51ecaaaae5967506a64cadfc8e6b507dec"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002500), 0x10003) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000002540)={0x6, r0, 'id0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000025c0)={0x2, 0x800000000}) pwritev2(r0, &(0x7f00000038c0)=[{&(0x7f0000002600)="ab8e633628c6dfdc6192dee6177843f39f66b334476645cd1bd6fd8a0d1f27643a262ad2e216f5ec414fb96f9d1a97dbea3e5681fa8013394278e53ad8483673", 0x40}, {&(0x7f0000002640)="f2175098fb191d7b926253cc72c05e84d818dd749dada6c64535ebfe6b212eebefff84d204b028b0a65487205278cad1d7585706938a94b0dd674a0a085d743d2392f7813f40d55f706c40922475e4aca2ea1cccf9287ec8bca3dbd616785c8dddd948f9ed75c8ab8251abdb981945d19a0464292cd42a3606720980001b287140a62cf0c4e5ea8a871ebf39e348e995bfcbd6624f2604514de3cf39995830939df86480c115edb095427820593c457349427aef83e5665cd102037e0686f345716addb92f0bac51e0ec374cba1b4b41e56adfb402d4cd02a9f8f7d3677ed080a6db062a9e3240dd24", 0xe9}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="6596ce61602d9328a33ebed085f3e60a024665a26c800dbae7babd516de5c7ab0ea78380a40f26df5300d1c24f5da5c180519d1bd85bb6e8f7ef9cde8fb730be308c2416d5ddc3466aa223907efd818e5d7da36d7ac6e0e59c232f62f715c8f9ec1a8b9e7d149fbf663107a437d3943acf11d275d5a8ee31cce708019725dd01409e842cdb79118ef935b215f28968e1abd2d0fad17af1b5f71b95fac54ebfbc355c4297bf28b00c2ba682b97fb4b80db48a52056ea8b18b7329bef2c1df0838e4110ee6676d2c864efd1eea3da49e4c", 0xd0}, {&(0x7f0000003840)="1d76f2e51c59e7eb9b5ee0870d01709032c3c5b3f28e18c47d10f02d2c", 0x1d}, {&(0x7f0000003880)="8925ce70e3d07eacbe6fa0222a50", 0xe}], 0x6, 0x69, 0xffffffc0, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000003940)=@arm64={0x2, 0x8, 0x17, '\x00', 0x80000001}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000003980)) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000039c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000003c80)={&(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003b00)=[{}, {}, {}], &(0x7f0000003c00)=[0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000003d80)={0x0, 0x2, &(0x7f0000003a40)=[0x0, r6], &(0x7f0000003a80)=[0xf4c3, 0x29ef, 0xd, 0x5, 0x8595, 0x7], &(0x7f0000003d00)=[r7], &(0x7f0000003d40)=[0x1691, 0x0], 0x0, 0x5}) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000003dc0)={0xdddd1000, 0x1000}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r8) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x7000)=nil}) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000003e40)=""/94) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003ec0), 0x440041, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000003f00)={0x1, 0x4f}) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000003f40)={0x1, 0x8, 0xb32, 0x2c8, 0x6, "86e67f360a53788f0ad2288a233ea77141ebe6", 0xa000, 0x40}) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r8, 0xd6b73000) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, &(0x7f0000004180)={0x7, 0x9, 0x1, 0xdd, &(0x7f0000003f80)=""/221, 0x95, &(0x7f0000004080)=""/149, 0x36, &(0x7f0000004140)=""/54}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000004200)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000041c0)}) 22m44.665291664s ago: executing program 4 (id=4444): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88281, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"ce926afd827c2ce6372914f7385a855d51dee053a395d91fe807356219b0acd7"}) read(r0, &(0x7f0000000080)=""/150, 0x96) 22m44.510859869s ago: executing program 4 (id=4447): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="10214f8eac0551a32f4cee", @ANYRESOCT=r0]) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 32) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host, 0x2}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7ac, &(0x7f0000000140)={0x7, 0x100000}) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000200)) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x12, 0x14, 0xde}, 0x8, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0}) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x40, 0x50) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) (async) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x12, 0x1, "12bb0c4c8afddef0fd3a181c9878ddcf71398fcf141b0ba1bb55f9a1dc5a2ca6aebf36fe4ad2010e729d0b06ced3eb47f86a96c67ed3d9fda791a0f82b4ce277", "b001b008120e486d5581b5eb0cc77daf57fac8a246958f29da2d024be3b2e9509201946072505651af63be4e3c153d3b3731c14b392d25577949c919f361dfad", "832f53d1aec8a1d115f858b73baa414891f1eb4b374208d13d4cf6f99c0182f8", [0xfffffffffffffff9, 0x5]}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r9, &(0x7f00000000c0)=ANY=[], 0x30) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x206001) (async) write(r7, &(0x7f0000000680)="7ae3b8089afa057e92de00320dcabb2f897c23d6e29b7a84473d7d2569ed50a2f39cb95f39c68f7068c1f3de2781e8154ced42718993b003c317ad46fe595b8d89893411e80beda0300a7d52eb2ebeac548cb4d851d5b3fb24e2d4dd9a37c7b8d13c1a4e77ccf95d394f69c42685d64dcdd9362624325fe188ae025a844b99f21fcc030fbf6f12e7cae296245f4a3ec0e1e7a329370241b00701ff2db006fa87df86584ebf15d4e7f27dff5033d290241f8c4b4022d7e6b59c78f737a9838e320d1bd2109c8573e2cbc1f382809a", 0xce) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 22m44.232338864s ago: executing program 4 (id=4448): read(0xffffffffffffffff, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000001c0)={0x9, 0xfffffffffffff000}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 22m42.855741266s ago: executing program 4 (id=4451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="506c66b5e775fc8e", 0x8}, {&(0x7f0000000200)="a3d1d8", 0x3}, {&(0x7f00000002c0)="aaffa6", 0x3}], 0x3, 0xfffffc01, 0x5, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 22m40.543645784s ago: executing program 4 (id=4460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c'], 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 22m40.417023731s ago: executing program 4 (id=4461): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) close(r1) read$snddsp(r0, &(0x7f0000000600)=""/72, 0x3e) (async) read$snddsp(r0, &(0x7f0000000600)=""/72, 0x3e) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) read(r3, &(0x7f00000003c0)=""/166, 0xa6) ioctl$BLKOPENZONE(r2, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x2, 0x81, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x86b, 0xe9, 0x2b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r6}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r7, 0x5602, 0x0) (async) ioctl$KDGKBSENT(r7, 0x5602, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0xa0000, 0x0, [0x8ba8, 0x5, 0x1, 0xfffffffffffffffe, 0xe, 0x7fff, 0xfffffffffffffffc, 0x7]}) (async) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0xa0000, 0x0, [0x8ba8, 0x5, 0x1, 0xfffffffffffffffe, 0xe, 0x7fff, 0xfffffffffffffffc, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x10000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 22m25.279526499s ago: executing program 35 (id=4461): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001}) close(r1) read$snddsp(r0, &(0x7f0000000600)=""/72, 0x3e) (async) read$snddsp(r0, &(0x7f0000000600)=""/72, 0x3e) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) read(r3, &(0x7f00000003c0)=""/166, 0xa6) ioctl$BLKOPENZONE(r2, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x2, 0x81, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x86b, 0xe9, 0x2b}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r6}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r7, 0x5602, 0x0) (async) ioctl$KDGKBSENT(r7, 0x5602, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0xa0000, 0x0, [0x8ba8, 0x5, 0x1, 0xfffffffffffffffe, 0xe, 0x7fff, 0xfffffffffffffffc, 0x7]}) (async) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000180)={0xa0000, 0x0, [0x8ba8, 0x5, 0x1, 0xfffffffffffffffe, 0xe, 0x7fff, 0xfffffffffffffffc, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x10000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 15m10.320422162s ago: executing program 5 (id=7334): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x0, 0x7, @name="123000007d000000000000e2322995090000e200"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 15m10.080392873s ago: executing program 5 (id=7337): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000080)={0xb4, r1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0285628, &(0x7f00000000c0)) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000280)={&(0x7f0000000240)=[r4], 0x1}) 15m9.224073315s ago: executing program 5 (id=7342): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7, 0x40000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000001c0)=0x100) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002200), 0x84280, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa0200, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000002180), 0xaa880, 0x0) read(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=""/4096, &(0x7f0000002080)=""/172, 0x1000}) r4 = openat$incfs(r2, &(0x7f00000021c0)='.pending_reads\x00', 0x200000, 0x40) r5 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002240), 0x80000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r6, 0x4bfb, &(0x7f0000000140)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r8, &(0x7f00000001c0)=[{0xff}, {0x0, 0xb, 0x0, 0xfd, @time, {}, {}, @result}], 0x38) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000380)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x125f, 0x0) mmap(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x5a051feb1f984a0d, 0x202812, r1, 0x7dfff000) 15m9.066341651s ago: executing program 5 (id=7344): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x3, 0x10001) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2465) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000011c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000040)=0x8000000400000000) 15m8.841334942s ago: executing program 5 (id=7345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 15m8.206637922s ago: executing program 5 (id=7351): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r5, 0x300000b, 0x11, r3, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0xdddd0000, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 14m53.143138753s ago: executing program 36 (id=7351): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r5, 0x300000b, 0x11, r3, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0xdddd0000, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 21.218560455s ago: executing program 6 (id=13684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x100}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000000)='4\x00', 0x2) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xee) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000680)=[{0x23, 0x2, 0x0, 0xfffff010}]}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0xc1f, 0x20040) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000180)=[{{0x80000000}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000300)={{r10, 0x0, 0x0, [0x4, 0x9]}, {r11, r12, 0x3, [0x132, 0x5]}, 0x4, [0x1, 0x81]}) read(r8, &(0x7f00000001c0)=""/157, 0x9d) 20.640373906s ago: executing program 6 (id=13691): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7d) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:j'], 0x9) (async) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:j'], 0x9) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x42043, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0x3b}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0x3b, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000100)={0x18, r6, 0xfffffffffffffe86, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x1) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000540)="1afb1f000000", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 20.228488295s ago: executing program 6 (id=13694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0xc03, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$KVM_SMI(r1, 0xaeb7) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000000400)=""/70, 0x46}], 0x4, 0x5, 0x10001) 19.870013902s ago: executing program 6 (id=13696): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000001c0)=""/65, 0x41, &(0x7f0000000240)=""/3, 0x5}}, 0x48) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4081, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d0e, &(0x7f0000000340)) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x52326000) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1000001f, 0x101000) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) write$cgroup_int(r12, &(0x7f00000000c0), 0x12) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x3, r9, 0x0, &(0x7f0000616000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8}) (async) r13 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x4080) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r13, 0x0, 0x0, 0x1, &(0x7f0000000680)='N', 0x4}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x20000000ec071, r1, 0x4cea3000) 19.728078563s ago: executing program 6 (id=13698): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) preadv(r2, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000680)=""/190, 0xbe}], 0x2, 0x0, 0x7c) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x1, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3014, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f0000000000), 0xf4, 0x101000) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 18.681731108s ago: executing program 6 (id=13707): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000840)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x8, 0x4, 0x0, r6}) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r10, 0x5000aea5, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 18.37246672s ago: executing program 3 (id=13711): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f00000000c0)={0x3, 0x6, 0x7fff, 0x401}) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000180)={&(0x7f0000000780)={{@my=0x1, 0xfff}, {@hyper, 0x80}, 0x400, "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"}, 0x418, 0xffff}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f00000000c0)=[{0x5, 0xe1, 0x0, 0x0, @time, {}, {0x0, 0x1}, @raw8={"1b28c02c97e8c88ddd550281"}}], 0x1c) r9 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x800) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3}]}) ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x40, 0x15, 0x8000, 0x3, "da9c4b6806f00193d0d0623d64e17a32d3fbce0b704bcdd6b8ac4f1cb99d8595"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r10, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r12, r11, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r10, 0x3b89, &(0x7f0000000300)={0x21, 0x0, r12, r13, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r14 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r14, 0x7dfff000) 17.983670335s ago: executing program 3 (id=13712): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000001, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17.123580245s ago: executing program 8 (id=13721): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x8, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000600)={0x0, 0x2, 0x0, &(0x7f0000000200)=[{}, {}], 0x4, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x3, 0x0, &(0x7f0000000580)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000680)={r3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x3, "01cf355e0ca09e2b4731ff24028688b592088475f38752139adec3df4c07a948"}) 17.010780661s ago: executing program 3 (id=13723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async, rerun: 32) read$FUSE(r1, 0x0, 0x0) (rerun: 32) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) preadv(r2, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/27, 0x1b}], 0x1, 0x5, 0x80) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) (async, rerun: 64) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16.793931227s ago: executing program 3 (id=13725): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000140)=""/152, 0x98) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x2, 0xffffffff, 0x0, &(0x7f0000000080)=""/69, 0x0, 0x4000}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d00)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000340)=&(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000140)={0x0}) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (rerun: 32) 16.656442684s ago: executing program 8 (id=13726): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x3, 0x9, 0x7, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008b"]) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='lock m'], 0xc) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) splice(r1, &(0x7f00000000c0)=0x1, r1, &(0x7f00000001c0)=0x3, 0x4, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xf5, 0x40800) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000540)={0x0, 0x1b19}) ioctl$VIDIOC_QUERYMENU(r10, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 16.622997001s ago: executing program 3 (id=13728): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) read$midi(r0, 0x0, 0x43) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r2, 0x0, 0x8c) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$int_out(r3, 0x5462, 0x0) close(r3) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000000)={0x1}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x100010, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r8, 0x40000) ioctl$KVM_GET_MSRS(r7, 0xc048aeca, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6cc0, 0x0) read(r9, &(0x7f0000000100)=""/159, 0xfffffe5a) 16.432359366s ago: executing program 7 (id=13731): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000300)={0xa0, 0xffffffffffffffda, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x2, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x6, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0xd}}}, 0xa0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r1) (async) r2 = dup(r1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x82f6, 0x0, "0800000000000002"}) (async) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x82f6, 0x0, "0800000000000002"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x141802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0xbe6}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000044c0)={r4, 0x7, {0x0, 0x0, 0x0, 0x31, 0x6, 0x0, 0x12, 0x1e, 0xc, "10b1fd85ab075a6a66216b154f0e6da088ef8ddb9d1ec72a73faed5eaa6cf73c7fba0358b9fa790236af346e6d46dd15a4d7801c1c6ee4ae34cf0e63e1a6810d", "edcf9ab3ec6d720c873a49639e0ba44fc3b613b900bcea915ffdf29f119d94e2d05b2de17c665309ef24cd3dbe89793e534b9342f4eead32bbaf53c0d468c420", "a8100b0cac6b70de3ce2343c58802f14c241053dfe8a98c76953a81b48de234d", [0x1]}}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x3d6a29d628232d86, 0x0) read$FUSE(r4, &(0x7f0000007e80)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000005e40)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000004440)={0x5, 0x1, 0x100000, 0x1000, &(0x7f00001cf000/0x1000)=nil}) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x14b080, 0x0) write$rfkill(r13, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x0, 0x1}, 0x8) write$FUSE_ATTR(r9, &(0x7f0000005340)={0x78, 0x0, r10, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r11, r12, 0xb, 0x8, 0x1000000}}}, 0x78) write$FUSE_CREATE_OPEN(r8, &(0x7f0000002400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x4, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, r12, 0x1, 0x3}}, {0x0, 0x18b6358d8c94ffb0}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r8, &(0x7f0000002400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x4, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, r12, 0x1, 0x3}}, {0x0, 0x18b6358d8c94ffb0}}}, 0xa0) 16.38726137s ago: executing program 8 (id=13732): r0 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x23, 0x2, 0x1, "a677c17a5a00030000400000f9ff00000000000000000000008000", 0x31324d59}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 16.196350792s ago: executing program 8 (id=13733): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0x1, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x2, 0x0, 0x9, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x3, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 15.907022379s ago: executing program 7 (id=13734): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000240)={0x2, r1}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000) 15.768603808s ago: executing program 7 (id=13735): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x15, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x15, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) (async) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000a40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000a40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffff5fc, 0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r5) (async) dup(r5) r6 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x78) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003c80)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0xa08, 0x3) (async) preadv(0xffffffffffffffff, &(0x7f0000003c80)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0xa08, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x8, 0xfffe, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe, 0x3]}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x466, {0x8080000, 0x3000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 15.67233694s ago: executing program 8 (id=13736): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0x9, 0xf9, 0x0, @generic}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1f, 0x0, "4a349800000000806913220909000909000a48", 0x5, 0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x541b, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000100)={&(0x7f00000003c0)={{@host, 0x1000}, {@my=0x1, 0x5cae}, 0x400, "e2c283a0cacc4013af52da42a4da6c96f9676f49a80a3e9ffda745ff139f93c653e907d4b0a35b9dbfeb2b4532cdf5fc55029a64f98faad461a147aadff0e2e8e6ab1cf92f70f9daace6c97ccfe3b5fed19b0b3bff583e5dd7896b301381e738816392017b046dcf0912e553d2043653687b312f595a8441f4b7459082f7d669c207f39180959a40e8c662c0e1f8f9936eaf5b9830028badb4bb7e3817a6931cc61153bc3ceff79e3e0fcd774e8722a90df67c78b3e96a86995d6e8993683cbfe681adb27cd63672a1702d01a5ee4f12bbb246f4d4c0d37d5fac56acb3dc24cbaa946ea4eb0f64d1b8e108c4a7cf6b4161cdbc8cb275634e33416a53464b1af9b8db9bca4badffbbb83631cc14cb768ca591577eac4ebd63e5167474bdccbf0de6000d47ea60c5008ae51a26fe3840492c21bc6eed0d4dd885349ab86b4ed50d93bbf7c35214cb597bc27e67828972a0841a012bfd78f89bf591d6a0decbbd48f89b8f3a79a536bc5deb4bf33106b59347ef50acb110cd3e41fabbdedfe8292f9d4fbb5a47a2430e3ca0983378662b9f2e7b3db89753d60e1238e82f2ffc444a44fbd46624127e3cc596ecdb95906358f5d93f1b497c1d0e7d5536a8a85a93354315595b1df4f105fd98f35fd123f33f6505b2c24a7073f5c79519c15059e8741258e95888166f0b6d8e630911113785c6f46a96b519e9fea962bb1971f50f78b51b0ddc891dec0a1c1a8b1bccef2e6e28b217eb3f63dc056dd1895bcae0c73c5a542d21f12527d431d54119886a5b67ba7f24b46968ac71c3079c2f3ea77c88858fd038555637e6ca6d7cb38a69a49d6592cb783ddde13ccfc74d5e7e0359556207baccf83d8ca7edcfd47b7b4a62b6af67e53845b8443463a2ea5f92c4cc087c4fc400500cae8c2a6d40edabd4e57f3137b3b5eaf177a5b0844a78235b4f124b4b756c28912d82f5dbb4b813e4fb15e64f36d3bf637056c631c7005d7dc9e5bb88dbba1fb64c262063a908addfadfcb17444b2b6a236e5bd43287656a78db54659963358e4b05bbc2955fbba4aed57246ef0195b13c423c6ebc67bb0a52dfe961ab0a785acb7280e76d909a0939f1d6e3294c0c5f4a386688ba41f8408af14f0d66594c276d57d759bd22f4a1af383efa14801e1c5a386808881f5f5ac3506fb28240fc4cd396553cbcc43feaae9dd56421b82adb8a46a2835c0c2ffa5625c79015c16263d989a720093622af48ffee6ba85671ab6a071be614391473a5748b7bdafcf980ab8cf1a7ec8e997d20df92a39bdb20d9ee433c1c525ab3c81e2783b29fb05c9b54bf3672eebcd0196fcd42c4d7772e5202c2213cc7b9284d02df3b0768ab078f61fcd411124f806121010d40b358dcbedf58e21dc4188f0d60f4a4b6ccf8b55f9b072865577a1dc8147bc3184122e862ef3c293a55985f8fe9532"}, 0x418, 0x4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) mmap(&(0x7f0000072000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x36325000) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r10, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x8011, r11, 0x127db000) (async) read(r1, &(0x7f0000000300)=""/159, 0xffffffffffffffad) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r9, 0x5403, &(0x7f0000000200)={0x0, 0x8000, 0x18000005, 0x1, 0x1, "90ffffeb00"}) r13 = dup(r12) ioctl$TCSETAF(r12, 0x5408, &(0x7f0000000080)={0x0, 0x80, 0xffff, 0xc49, 0x1c, "091100ec00574384"}) (async) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000100)=0xff) 15.579126988s ago: executing program 3 (id=13737): r0 = syz_open_dev$ndb(&(0x7f0000002080), 0x0, 0x80083) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x0, 0x0, 0x39565559, 0x0, 0x0, [{0x0, 0x78e}, {}, {0x0, 0x7}, {0x0, 0x80000000}, {0xfffffffe}]}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x0, 0x0, 0x39565559, 0x0, 0x0, [{0x0, 0x78e}, {}, {0x0, 0x7}, {0x0, 0x80000000}, {0xfffffffe}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x149041, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002100)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002140)=0x5) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002140)=0x5) write$rfkill(r3, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) (async) write$rfkill(r3, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x5, 0x700000080000000, 0x7}) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x5, 0x700000080000000, 0x7}) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x5, r11}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x5, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r11], &(0x7f0000000200), &(0x7f00000000c0)=[r12], &(0x7f0000000340)}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8504"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "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"}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x8800, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x8800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001080)={{r13, 0x5, 0x8000000000000001, 0x3, 0x3, 0x0, 0x401, 0x2016a, 0x6, 0x7f, 0x1, 0x6da2, 0x10, 0x9}}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x9, 0x8, 0x100, 0xffffffff}) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (async) r14 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x34325842}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x34325842}}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 15.505612091s ago: executing program 7 (id=13738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async, rerun: 64) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (rerun: 64) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) (async) r4 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) (async) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x4b564d03, 0x0, 0xfffe}]}) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x3ed4000}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0x800, 0x12) (async) write$6lowpan_enable(r10, &(0x7f00000001c0)='1', 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) (async) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 15.348267463s ago: executing program 7 (id=13739): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=[{'ALTPCM', @val={' \'', 'Master Capture'}}], 0x2d) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x591) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 15.328209547s ago: executing program 8 (id=13740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r3, 0x0, 0x0) (async) write(r2, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x4000010, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 15.154476368s ago: executing program 7 (id=13741): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x34324142}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x34324142}}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) 3.114774981s ago: executing program 37 (id=13707): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000840)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000004c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x8, 0x4, 0x0, r6}) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r10, 0x5000aea5, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 90.017898ms ago: executing program 38 (id=13740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r3, 0x0, 0x0) (async) write(r2, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x4000010, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 49.32728ms ago: executing program 39 (id=13741): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x34324142}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x34324142}}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) 0s ago: executing program 40 (id=13737): r0 = syz_open_dev$ndb(&(0x7f0000002080), 0x0, 0x80083) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x0, 0x0, 0x39565559, 0x0, 0x0, [{0x0, 0x78e}, {}, {0x0, 0x7}, {0x0, 0x80000000}, {0xfffffffe}]}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix_mp={0x0, 0x0, 0x39565559, 0x0, 0x0, [{0x0, 0x78e}, {}, {0x0, 0x7}, {0x0, 0x80000000}, {0xfffffffe}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x149041, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002100)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002140)=0x5) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000002140)=0x5) write$rfkill(r3, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) (async) write$rfkill(r3, &(0x7f00000039c0)={0x0, 0x2, 0x2}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x5, 0x700000080000000, 0x7}) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x5, 0x700000080000000, 0x7}) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x5, r11}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x5, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r11], &(0x7f0000000200), &(0x7f00000000c0)=[r12], &(0x7f0000000340)}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8504"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "280aba6b8e0aa6e029431910856d406050aa82ce729c332f81e2f0b028dae291955610fd263be2006099c271770f0d71371358dd31b3603e621b8eb1cbe91ce9c71023bc36ad12704758951c00d760a1c494c7eb02661a5fddc67c2fca38c8b88e921322a8d97592280294cb40baae40becdb65bc2b847b4e313288afe6564b98a0e434f00101da82b02b7376f89655ca638d89da285ff1d904eec2a34f9fa7d10dbab680026dcc39e20dd82dae370ecdeab8bcf975f8d25c6087d16902d5e9223371e6480d5607b1d8eddafcf7109733b29f9c8bb14f7da644a6b6c5128b7250b01cc336ca21d090741be6a412015f7bfa9cb9ee7edd5bfd0df6f13e0f6fb42", "2176d24ed9731822701e5e1fd365173caa8ae5ae7fab070e393157e63520d0d4e3cc77054f81b762f7204fb207faf1094cce40e8421c8055abd4177970fe301162cad687b9a80bc659476f2c887ee41758f4f01a4c3f54f4c848ce484f3e522bd8196d1e96cbecc74ebc2ab4ca9036edc40e3960d5287fcbbfb0e50478abdd3617b882daec0ec0679fe10a5f2927baefac23258580b5748d9af247d9758b073a56c158543d73749fad0b733db4924bf5bd0ecdb4fac35465bddd93c72baca95f0fd99949548d2d8374ad48c37cc7dbe7d0648d442caac07b6d8d678a451d0249f341635b907f3a895a41190c45a96bd3ff2b0a36fc326a6d62e0f485c4486e88fa19a3e94c503f960c1d1c2b2530d5d4db8c4a0d381cf736b0d61d108d909ec7ea4084e937789af866e6e7731b0804767dca46d38de9d962c79ffc85dc1b5f9fa0562ee01805cd348c0b084e0581b5df9ff828b3e7d1a88abdd682ab54923950a6629bd0448f58657a36882e99f9c1209e744d9da078bc9cef299fbc4921a03314fff03ac16feaf042cebe573c8c04bb67ca18c03c089c713389fef3273a4b76255a3696ccd94a908e7252e99d0a52f33dbddbb83103efa46ae5d42ccc46a56d9e96845fdcfd5820a6788bd385f9620422c8214d2d67b6b782da12014d8a0a2be8e18135702f62f7ebf7f3c3307df69feb784180ecdf6c64be543c971d2054d3d32507cdd41d0fec484650e16370d33d1f5aa6c9b054cd55263a7caf4f5d4e3a55b1ecc62ac6f9a60622df914cb78a6782fe385f4d81e406498f9e0d7f1dd538e31fe750dacfa743a3e7b4f44585e7fd868e2bedb0f774e01583064b06c233d65572460126fff419a91bf555116bcfe3db8b111b7c4c9d9296d21dbd4f6acea5ed167a9c1e57dab3bd3fdca7b73a2aed0254e8325641c496c559482f556d9d66853e52d16948cff6b9a2b587720c52a36b157582d521ce13d95cbaa228ef362a0caadb71831eca3e60959a9fbc02336a7cd7f75a885cc817d18b7c047e632f7abda4a20e5cedcf55998d3a3b290779b74e0e6602eae4bdfdea32d0684f38b84d6144cd7ef4617f19703291f029691511e2a0da02912982cdc9db0e7c8d0cd0e316b9a4fa56ded842036ffdf8762a441e9ee2f51971eb4267346dad25af4e007ea9e55ac8df870b3f48639be3b6eaf0d463ed55e483443c0a23976d793cb30de2162a78773df08e80fe32ae2b7bdc970f629f7f7e1e1d36a5efc62c83e6af33b92460754894174404797e4538c653e04c6f34e90785f7b9a252bac5b8c316dacb4330350038237651a1cea84db00a4c3d5fadf23aa212d38ccc3b4d0a19ab5cf80507e6ba112e864949628b549ce910d49f5a477be93fbbba680051e4c05d35486a6d11b9c9724c0be68fe2b990831f9744d565df16f95f02df98806176747e9f1284a432dc35754b6f3d1c6e73a12bf50a3cfcfe82e405e9ff445f5e37cfd6b4a86600b6ffe949294555ae9475ef11f3ac3807d1620c965b1c15714a8381552dff1f186649d3e22d5e2731dda3a6eeecf6ea6647a84cecca9484fab9030abec3fa6bba2a01933185507478d0ea10f02d3cbdf428cc0b46b4bb7ae1fd88ca16ecc04f65a94517c43cc8cf57783b7017b5b75cbfc3ca781e8e93188bc4559b8cc36b5784c3d72d3b5d8a07af0a3eaa1361596e1ee5f8ac048bd4a819af0fe4e1a1afa5af1839972c7ca8c2915e75e98f388416226306afc11c1b6620dabe6a8efdea19f766d3c4f378fa44a7081feb4a389d53a068fa8e0812652ebe37262eeaa5d597a6cf28e5ef19a4941ff26dc818eab587077953aa494fa82adf445da9cc38a0e6ad7f1c4d23667e99e41b606b3a528ba0c18813c7011ab4c2592df8a469ce974f4663bf316230e856519a52fd38a43b6522034a06d0cd602e9080165bf34f30c3685ba828655dfd26752422191ca164d46d4b538460fb615ff006ddbaf407e7e0b84b07a44d4924b8735828cde8b5cfb669d694877ef9aa75f506c63befc09b12259f4bd5b866f22ffb41af456fefb1c13b080814375ff4f780ecbd4c8d2a8bd2e65bd5862d02bd83d4948ca7f343412f24cd36703c1c42d445770ea9a2b498f95fb77a4bb43b9b619fe62e9fb6fe32d4217d5e8d664633bffd6a1ef9b68e68d254d88c71dfaae00e7c6e42726b4953c7d149e2fb72bb54f29e399ecac11df19c4219a8daf393b1347e7c2d6e7e6b92e86297bfd7078b66d07da47996b3a4bf9d598afb5fd2e7a9977be9b1173baea3fc2e5c5d1f3441c868b8c80fd09c4a29df98fe39c0523f0a7c9c03224251fe8b2cc2ea3fad1165a25c84acf4f9cdc508648b6c359caea6500ff366f5eeaea03feeb21a589dff6a5e9503f6d97efbe8d4e71cb2aa77b5dc21db5398acb527e5aa0259ceeb38a04ceaece8ff4c6e09695a6beb3d9b3a9988d36dc86bfcad7acae87ffab2671c3be97c9f815d5fa393b393a7d869e5fbad04eb9a4d80e8255f5a1058bd292f98da47532625f582ba632255b798f8aa99eaf14de2c93b15325a10fc87b74c8590fdb452fabd8b5323141bef02e00be00e771a7ee65114222d02463414ff48c86af70ffad20f3de7bc6c6985894e355bb35001d00ed89c90c3ce50f7600654180372371668cfa2179bbc11454acc57424c38d8d6e85b269127ba52d23059eca9830ffa6aeac0faadee7af2e439abdf37631390fe8677e4172e4b5965c9ed9e3337b66368a93deb0a5fbd45ef8552714cbacee8c0b03055f41222374ef7eb67b87a45160bb25c69f4a00457a9125e01f651959d7260110b18690f6d3ec7b73ec1fb35fae7c473a526f1b561aba1ca0256b4655fa2f0f7aa2b47586269fc7e6df163f55779e1a113bcd7e6fa6d36f708fee7ffcc764f68d53af1aa14e390bfa10ce2f9dfe9cece8788a25de6e2e2e28dd2b393bb38278f4a334667554a14d0177b1d2abaeec35d5fbdc5e19a3f93cb7a947ca592709ab93edc9eba9e3da606adc2c2f984c1cd79f696475137224c3892c5f8ae534592d6111483e510d91793ae52b4088dca7421faf05245acee154902c69d16c02fe966ee682b5a0dda47d16bb73fee7a617c2af17acad30bf7be53e8fe061f60fae493ee03460e61421ee2af9180fc975179784026915c4b17e6f524270aba4f92a7b67eab459f90836cfd9eaf08b637faf60c0504e62e17d2c934eddb70a1850adb2a6994d491f4505dbb23a0561ec4f5a5e7d12826302d4a86ae28e5a7401633cd794dc9e4bd90fdc605e3409f33eab95f4eb543445b0480cfcd5adba66bcc4db13acb35026c4566dd9549aa0d9c105ab984eeedc6fafafc237db512282116543b4445851c20f2f2fdbcfb136ec4f8b8968f3bf840c01055d59eb147adb347668b098e29f1574ebeda98bd23c2ad014d031e2935289ed412b92274bcc9ce86731c894328f39879c1ed5d126cbdac11933e274eabd494df97297c2c1e0841be883919bbb4491bcb6bfd126cec703e35c8c986aa8abf5854ab0e7624fcc959d27fac9f0968e1e32f7c70d29ea83705253a53a2636c263784ca2f4b3401c399b5bd72da2433503f94e1bf67682491d30a2e48c635c9521a8179a2cf08dd6e3fdf7426fbdbe34a5d7f2435ed67a32abd4bc88f366deecd3c66a35cc8fb35d53da64aca6a671f53b19acc380d8f5610a15391c15760bcea6417e631e0ecfe0f6d3e005264b036452964f67a906f1908809bf7f54f011c6b178d29ea05bbe3123a3b47216bc92da354a4a11476ab94408c9c163512913186d73a31a1686a71b67de528dc4d51709c7de8e8e3d09d91e683bd4ad07b4609098ed80d8d68f18f114f1cab4c7c03ec6673d1869ed63fee188c028b0230af0206813e17a490d8659bc484c79fdb9b2e6fcf316b3fbcc8d804572446a0a7905cad8ed244c573993cbff8340ea1420a8ec73412cb9b9b0374ef3dfa31e86355ef065b375234a8656e43f2cdefc136c97cd8b35ca05c526088d9059058ed66216d409674651a5a15725d7a50f37e0de2b38d5dc0d3a0fa7704ec0d379c56cf6f4e4e6b84630025e8fff895ab2ebc2aec344edeb475a25480431cd462e4e7248cd6667274eaa5a37617591eb368704318e6d9fc15532ece455b17fcf39a96d6af0e89a8d5736f6e5151ff0dda4e500148939ecc3e18c6eb12770dc6d89fadca3b186a967a0b6699e3c6b3fcd8f98f16016329fc80d5c9887b60530a08b23a877544ad76c8a725501deda25ff38e959059a05a554018af62b39b129c1287e5c910c3cc44e2ea8db37992a78bca40d0e4cf83f4274fc0a2d8e056e8d08b7335efeddf22a7cb3b47c7b90bb5aec6344ba3189f0ad1c73465a195d6ad78ba96766cc189d42c5f6b16804f2ae1ac843df8f6ce03517012e538b9034c7783b4a396e17a09eb1128f01fd5fb3a9da1caa9767a02bf8ee24c44cb69497ad202c3f4f5f2f43e4ed0585744aa32ef82fb4988dfc208d734e597aad80c46a0d4a5e7429fde31e622409f711b2a031b98bd46bd05fef503bf23740d81fec562f2529e9ba5b0bd32f7b5b36ff8b3ea22e44cc62b035d018041ce8df59cd6b2ec464ef4cd4990326d7ab6266bdb856b8e9a8e51291e04b419985217dd1dd0e45d793f7528a126c2e0789487e2811ad36a19f8c5eed53739ac41b52dc6bb2a445f1564d59bbc16edd811cd34dc289467f1a6047cd7f039dc5352f42d691187b6d197b83ac864faa51f2048e86cc53e06319b31405a72119a315905979e28df59538106f325e488527b9123b5d859d1f5c244ac9155e5a170413dfddcc38b2249eb7898d3b30ccc69091bc53581ed31d78c6da0f2852abf6fccf2ab70b5a9a4330bf4125436ef0130486ea94bb104ee7ea41b2499664f8292be44e214406b932fef28cf599d8c744c446e448675326afebdf79e805bc691e50c11ac2b56c379f606f64730ad4f903467f3b5b9329813ed0c0af9b7641062760c6a900a553920e0828a8e29e800ce123dc16dc6864c6f22e36b548dc52ae9ba60acb6ad4dcd9391e130f19773b9114fa443bbc1945f9ff0f75cee5d64b1bd7a17d592a3fe65a3f4bbfcaeb7b65e667d89ca1b9b52ba2e7459318b46cf59be9bff74616198ce78d919cdadb8262382d566763cf02552a17100df4b46c309b30c47a3e0e357b03928dd92cf20c744d38093e90938248a452efe993fcc1e57246c74dae2fa9b2282078405273768f1ec4943f951168735f9cf15b8794f4c2cbd0481b8808e846a073bf627cfc82f48ca8c7dd06cd3331667cecd91f378d0178f33db26ba8851de7be5d1c0bb92764ebbd033dc6a036f01f56878023fd00f705768694d8a5f913fdeb4c2b2f23b57434248994c0a0126803c3c7840d14b2ee7f6d1d260367a"}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x8800, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x8800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001080)={{r13, 0x5, 0x8000000000000001, 0x3, 0x3, 0x0, 0x401, 0x2016a, 0x6, 0x7f, 0x1, 0x6da2, 0x10, 0x9}}) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x9, 0x8, 0x100, 0xffffffff}) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (async) r14 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x34325842}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x0, 0x80000a, 0x34325842}}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) kernel console output (not intermixed with test programs): nd end of device [ 1591.554289][T21519] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1591.834272][T21543] input: syz1 as /devices/virtual/input/input434 [ 1591.858484][T21543] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1591.874480][T21547] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1591.901591][T27112] hid-generic FFFB:0008:0006.000F: item fetching failed at offset 14/17 [ 1591.916199][T27112] hid-generic FFFB:0008:0006.000F: probe with driver hid-generic failed with error -22 [ 1592.074889][T21559] input: syz1 as /devices/virtual/input/input435 [ 1592.579538][T21590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.601690][T21590] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1592.983821][T21625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.109228][ T5850] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1593.276208][T21650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.587624][T21668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.609195][T21671] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1594.243604][T21701] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 1594.879222][T21731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.896379][ T30] audit: type=1800 audit(1750381358.623:54): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11244" name="memory.events" dev="tmpfs" ino=2136 res=0 errno=0 [ 1594.937314][ T30] audit: type=1804 audit(1750381358.623:55): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.11244" name="/newroot/416/memory.events" dev="tmpfs" ino=2136 res=1 errno=0 [ 1595.261658][T21752] ubi31: attaching mtd0 [ 1595.267917][T21752] ubi31: scanning is finished [ 1595.273948][T21752] ubi31: empty MTD device detected [ 1595.390305][T21752] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1595.398018][T21752] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1595.406154][T21752] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1595.413599][T21752] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1595.421798][T21752] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1595.432774][T21752] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1595.441180][T21752] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 261102057 [ 1595.451465][T21752] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1595.463436][T21756] ubi31: background thread "ubi_bgt31d" started, PID 21756 [ 1596.472630][T21795] FAULT_INJECTION: forcing a failure. [ 1596.472630][T21795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.489758][T21795] CPU: 0 UID: 0 PID: 21795 Comm: syz.3.11257 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1596.489786][T21795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.489798][T21795] Call Trace: [ 1596.489806][T21795] [ 1596.489815][T21795] dump_stack_lvl+0x189/0x250 [ 1596.489844][T21795] ? __pfx____ratelimit+0x10/0x10 [ 1596.489875][T21795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1596.489897][T21795] ? __pfx__printk+0x10/0x10 [ 1596.489932][T21795] should_fail_ex+0x414/0x560 [ 1596.489962][T21795] __kvm_read_guest_page+0x18d/0x240 [ 1596.489991][T21795] kvm_fetch_guest_virt+0x12b/0x170 [ 1596.490025][T21795] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1596.490053][T21795] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1596.490081][T21795] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1596.490117][T21795] x86_decode_insn+0x33c/0x5310 [ 1596.490149][T21795] ? __lock_acquire+0xab9/0xd20 [ 1596.490187][T21795] ? __pfx_x86_decode_insn+0x10/0x10 [ 1596.490206][T21795] ? is_bpf_text_address+0x26/0x2b0 [ 1596.490239][T21795] ? __asan_memset+0x22/0x50 [ 1596.490259][T21795] ? init_decode_cache+0x78/0x90 [ 1596.490300][T21795] ? init_emulate_ctxt+0x4d6/0x660 [ 1596.490325][T21795] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1596.490359][T21795] x86_emulate_instruction+0x60a/0x1ef0 [ 1596.490395][T21795] ? vcpu_match_mmio_gen+0xe2/0x200 [ 1596.490418][T21795] ? handle_mmio_page_fault+0x124/0xe60 [ 1596.490436][T21795] ? vmx_vcpu_run+0xd8b/0x25d0 [ 1596.490461][T21795] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1596.490484][T21795] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 1596.490501][T21795] ? vmx_vcpu_run+0x162e/0x25d0 [ 1596.490565][T21795] kvm_mmu_page_fault+0x91a/0xb70 [ 1596.490603][T21795] vmx_handle_exit+0x10be/0x18a0 [ 1596.490626][T21795] ? vcpu_run+0x361c/0x6f70 [ 1596.490663][T21795] vcpu_run+0x432e/0x6f70 [ 1596.490726][T21795] ? vcpu_run+0x361c/0x6f70 [ 1596.490801][T21795] ? __pfx_vcpu_run+0x10/0x10 [ 1596.490828][T21795] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1596.490852][T21795] ? complete_emulated_mmio+0x18e/0x7a0 [ 1596.490877][T21795] ? __asan_memcpy+0x40/0x70 [ 1596.490899][T21795] ? complete_emulated_mmio+0x4d2/0x7a0 [ 1596.490933][T21795] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1596.490971][T21795] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1596.490998][T21795] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1596.491031][T21795] ? rcu_is_watching+0x15/0xb0 [ 1596.491055][T21795] ? trace_contention_end+0x39/0x120 [ 1596.491081][T21795] ? __mutex_lock+0x330/0xe80 [ 1596.491105][T21795] ? kasan_quarantine_put+0xdd/0x220 [ 1596.491132][T21795] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1596.491161][T21795] ? __pfx___mutex_lock+0x10/0x10 [ 1596.491184][T21795] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1596.491219][T21795] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1596.491251][T21795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1596.491292][T21795] kvm_vcpu_ioctl+0x95c/0xe90 [ 1596.491324][T21795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1596.491348][T21795] ? __lock_acquire+0xab9/0xd20 [ 1596.491389][T21795] ? __fget_files+0x2a/0x420 [ 1596.491423][T21795] ? __fget_files+0x2a/0x420 [ 1596.491453][T21795] ? __fget_files+0x3a0/0x420 [ 1596.491481][T21795] ? __fget_files+0x2a/0x420 [ 1596.491515][T21795] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1596.491543][T21795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1596.491569][T21795] __se_sys_ioctl+0xfc/0x170 [ 1596.491597][T21795] do_syscall_64+0xfa/0x3b0 [ 1596.491617][T21795] ? lockdep_hardirqs_on+0x9c/0x150 [ 1596.491647][T21795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.491668][T21795] ? clear_bhb_loop+0x60/0xb0 [ 1596.491693][T21795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.491713][T21795] RIP: 0033:0x7f8a6938e929 [ 1596.491732][T21795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.491749][T21795] RSP: 002b:00007f8a6a1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.491771][T21795] RAX: ffffffffffffffda RBX: 00007f8a695b5fa0 RCX: 00007f8a6938e929 [ 1596.491786][T21795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1596.491810][T21795] RBP: 00007f8a6a1c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.491822][T21795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.491833][T21795] R13: 0000000000000000 R14: 00007f8a695b5fa0 R15: 00007ffd1a416338 [ 1596.491863][T21795] [ 1596.920430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.948874][ T5850] Bluetooth: hci2: command 0x1003 tx timeout [ 1596.968847][T15209] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1597.877413][T21845] input: syz1 as /devices/virtual/input/input436 [ 1598.977550][T21924] binder: BC_ACQUIRE_RESULT not supported [ 1598.983471][T21924] binder: 21923:21924 ioctl c0306201 200000000580 returned -22 [ 1601.751546][T22175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.052607][T22197] input: syz1 as /devices/virtual/input/input438 [ 1602.689527][T22247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1604.705369][ T30] audit: type=1400 audit(1750381368.433:56): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=22364 comm="syz.7.11356" [ 1604.876805][ T30] audit: type=1400 audit(1750381368.603:57): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/rnullb0" pid=22373 comm="syz.7.11358" [ 1605.168583][T22388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1605.470158][T22403] No buffer was provided with the request [ 1605.711176][T22419] program syz.6.11368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1607.366452][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.372904][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.219320][T22543] tap0: tun_chr_ioctl cmd 1074025672 [ 1608.224664][T22543] tap0: ignored: set checksum enabled [ 1608.629202][T22574] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1608.645680][T22574] pim6reg0: linktype set to 769 [ 1609.170378][T22616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.210316][T22616] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1609.377776][T22628] binder_alloc: binder_alloc_mmap_handler: 22625 200000ffa000-200000ffe000 already mapped failed -16 [ 1609.415023][T22628] binder_alloc: binder_alloc_mmap_handler: 22625 200000ffa000-200000ffe000 already mapped failed -16 [ 1609.439435][T22628] binder_alloc: binder_alloc_mmap_handler: 22625 200000ffa000-200000ffe000 already mapped failed -16 [ 1609.459283][T22628] binder_alloc: binder_alloc_mmap_handler: 22625 200000ffa000-200000ffe000 already mapped failed -16 [ 1609.597563][T22642] vivid-000: disconnect [ 1609.628913][T22642] random: crng reseeded on system resumption [ 1610.069707][T22641] vivid-000: reconnect [ 1610.191978][T22676] misc userio: Invalid payload size [ 1610.730776][T22699] tap0: tun_chr_ioctl cmd 1074025680 [ 1610.805501][T22706] sg_write: data in/out 935721490/20 bytes for SCSI command 0x83-- guessing data in; [ 1610.805501][T22706] program syz.6.11422 not setting count and/or reply_len properly [ 1611.137566][T22731] random: crng reseeded on system resumption [ 1611.874930][T22766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.920508][T15209] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1614.505138][T22894] input: syz0 as /devices/virtual/input/input441 [ 1614.728968][T22906] CUSE: info not properly terminated [ 1616.524246][T22981] input input442: cannot allocate more than FF_MAX_EFFECTS effects [ 1617.882394][ T30] audit: type=1400 audit(1750381381.613:58): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 1618.557360][T23077] sp0: Synchronizing with TNC [ 1618.648523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.850284][T23087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1619.151158][T23098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1619.941656][T23155] input: syz1 as /devices/virtual/input/input443 [ 1620.963475][T23216] input: syz0 as /devices/virtual/input/input444 [ 1621.212727][T23235] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1621.230644][ T2994] Bluetooth: hci2: Frame reassembly failed (-84) [ 1621.245201][T23239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.291644][T23239] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1621.766728][T23278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.856504][T23278] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1622.384399][T23328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.269044][ T5850] Bluetooth: hci2: command 0x1003 tx timeout [ 1623.276350][T15209] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1623.470182][T23370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.569885][T23374] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1624.386420][T23416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1624.637822][T23430] sp0: Synchronizing with TNC [ 1624.663426][T23429] [U] [ 1625.125821][ T30] audit: type=1800 audit(1750381388.853:59): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11576" name="memory.events" dev="tmpfs" ino=2544 res=0 errno=0 [ 1625.885066][T23500] random: crng reseeded on system resumption [ 1626.173099][T23520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1626.591464][T23541] ALSA: seq fatal error: cannot create timer (-22) [ 1626.676003][T23541] loop8: detected capacity change from 0 to 7 [ 1626.684873][T23541] Dev loop8: unable to read RDB block 7 [ 1626.694998][T23541] loop8: unable to read partition table [ 1626.702139][T23541] loop8: partition table beyond EOD, truncated [ 1626.709579][T23541] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1627.140808][T23569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1627.299397][T23582] kvm: user requested TSC rate below hardware speed [ 1628.983600][T23660] binder: BC_ATTEMPT_ACQUIRE not supported [ 1628.992927][T23660] binder: 23659:23660 ioctl c0306201 200000000100 returned -22 [ 1629.436550][T23679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1630.919552][T23738] input: syz1 as /devices/virtual/input/input447 [ 1631.826703][T23773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1632.496822][T23798] usb usb9: usbfs: process 23798 (syz.7.11639) did not claim interface 0 before use [ 1632.900530][T23816] syz.7.11644: attempt to access beyond end of device [ 1632.900530][T23816] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1635.280688][T23909] usb usb9: usbfs: process 23909 (syz.3.11664) did not claim interface 0 before use [ 1637.401451][T24004] input: syz0 as /devices/virtual/input/input448 [ 1637.815806][T24028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.869035][T24028] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1638.510942][T24062] ALSA: mixer_oss: invalid OSS volume '' [ 1638.890583][T24068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.916893][T24068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.132383][T24131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1640.367138][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1640.401191][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1641.488976][T24187] kvm_intel: kvm [24186]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 1643.924832][T24283] random: crng reseeded on system resumption [ 1644.613340][T24344] usb usb8: usbfs: process 24344 (syz.7.11735) did not claim interface 0 before use [ 1644.694915][T24344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1645.001482][T24355] random: crng reseeded on system resumption [ 1645.179710][T24363] usb usb8: usbfs: process 24363 (syz.6.11741) did not claim interface 0 before use [ 1645.513279][T24385] sp0: Synchronizing with TNC [ 1645.521978][T24385] QAT: Device 253 not found [ 1645.574893][ T2994] Bluetooth: hci2: Frame reassembly failed (-84) [ 1646.432580][T24436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1647.588861][ T5850] Bluetooth: hci2: command 0x1003 tx timeout [ 1647.598414][T15209] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1648.012353][T24505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1648.029994][ T30] audit: type=1400 audit(1750381411.743:60): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24496 comm="syz.3.11757" [ 1648.425595][T24535] input: syz0 as /devices/virtual/input/input458 [ 1649.386008][T24541] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1649.588773][T24574] program syz.7.11767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1649.619269][T24574] program syz.7.11767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1649.639386][T24574] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1649.662225][T24574] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1649.729671][T24574] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1650.037405][ T5838] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1650.061531][ T5838] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1650.080170][ T5838] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1650.110772][ T5838] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1650.153505][ T5838] rtc rtc0: __rtc_set_alarm: err=-22 [ 1654.521871][T24759] syz.7.11796: attempt to access beyond end of device [ 1654.521871][T24759] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1654.552355][T24764] random: crng reseeded on system resumption [ 1654.597760][T24766] vivid-000: disconnect [ 1654.611562][T24766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.635078][T24765] vivid-000: reconnect [ 1655.103555][T24784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1655.484462][T24796] input: syz1 as /devices/virtual/input/input459 [ 1655.712172][T24811] usb usb1: usbfs: process 24811 (syz.8.11805) did not claim interface 0 before use [ 1655.725599][T24811] usb usb1: selecting invalid altsetting 256 [ 1657.716253][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1657.728900][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1657.737862][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1657.757366][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1657.768251][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1657.784440][T15209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1657.797562][T15209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1657.808937][T15209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1657.825750][T15209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1657.839045][T15209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1658.722919][T20357] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.463840][T20357] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.604867][T24928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1659.611847][T24928] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1659.752050][T20357] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.055859][T20357] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.347291][T24867] chnl_net:caif_netlink_parms(): no params data found [ 1660.901847][T25125] random: crng reseeded on system resumption [ 1661.066517][T10633] cgroup: fork rejected by pids controller in /syz8 [ 1661.122554][T24867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.139429][T24867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.151293][T24867] bridge_slave_0: entered allmulticast mode [ 1661.169639][T24867] bridge_slave_0: entered promiscuous mode [ 1661.207870][T24867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.233430][T24867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.241684][T24867] bridge_slave_1: entered allmulticast mode [ 1661.255824][T24867] bridge_slave_1: entered promiscuous mode [ 1661.380605][T25179] ubi: mtd0 is already attached to ubi31 [ 1661.723499][T24867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.762010][T24867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.813369][T20357] bridge_slave_1: left allmulticast mode [ 1661.825752][T20357] bridge_slave_1: left promiscuous mode [ 1661.844981][T20357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.149749][T20357] bridge_slave_0: left allmulticast mode [ 1662.155535][T20357] bridge_slave_0: left promiscuous mode [ 1662.172176][T20357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.587478][T25220] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1664.220202][T20357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.329590][T20357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.381716][T20357] bond0 (unregistering): Released all slaves [ 1664.886667][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1664.895650][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1664.903731][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1664.912060][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1664.922235][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1664.962692][T15209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1664.970819][T15209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1664.980796][T15209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1664.990041][T15209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1664.997787][T15209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1665.458906][T25286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.562798][T24867] team0: Port device team_slave_0 added [ 1665.577148][T24867] team0: Port device team_slave_1 added [ 1666.139109][T24867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.146100][T24867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.175208][T24867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.431732][T24867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.445545][T24867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1666.472667][T24867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.679350][T20357] hsr_slave_0: left promiscuous mode [ 1666.718829][T20357] hsr_slave_1: left promiscuous mode [ 1666.724861][T20357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.740629][T20357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.772013][T20357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.792452][T20357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.840520][T25358] support for cryptoloop has been removed. Use dm-crypt instead. [ 1666.857272][T20357] veth1_macvtap: left promiscuous mode [ 1666.871965][T20357] veth0_macvtap: left promiscuous mode [ 1666.877607][T20357] veth1_vlan: left promiscuous mode [ 1666.882993][T20357] veth0_vlan: left promiscuous mode [ 1667.039002][ T5850] Bluetooth: hci2: command tx timeout [ 1668.797997][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.804440][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.118858][ T5850] Bluetooth: hci2: command tx timeout [ 1669.159729][T20357] team0 (unregistering): Port device team_slave_1 removed [ 1669.400620][T20357] team0 (unregistering): Port device team_slave_0 removed [ 1671.188753][ T5850] Bluetooth: hci2: command tx timeout [ 1672.353582][T24867] hsr_slave_0: entered promiscuous mode [ 1672.360286][T24867] hsr_slave_1: entered promiscuous mode [ 1672.560259][T25351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1672.566234][T25351] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1673.212406][T25206] chnl_net:caif_netlink_parms(): no params data found [ 1674.746589][T25718] input: syz0 as /devices/virtual/input/input460 [ 1674.773132][T20357] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.011453][T25206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.023695][T25206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.044507][T25206] bridge_slave_0: entered allmulticast mode [ 1675.061271][T25206] bridge_slave_0: entered promiscuous mode [ 1675.084908][T25206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.100556][T25206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.120775][T25206] bridge_slave_1: entered allmulticast mode [ 1675.139718][T25206] bridge_slave_1: entered promiscuous mode [ 1675.422698][T20357] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.127434][T25206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.703000][ T30] audit: type=1800 audit(1750381440.423:61): pid=25811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11867" name="memory.events" dev="tmpfs" ino=1347 res=0 errno=0 [ 1676.771852][T20357] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.874873][T25206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.885346][T25818] ALSA: seq fatal error: cannot create timer (-22) [ 1677.330565][T20357] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.422922][T25206] team0: Port device team_slave_0 added [ 1677.441962][T25206] team0: Port device team_slave_1 added [ 1677.704685][T25206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.732037][T25206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.778719][T25206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.794203][T25206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.801258][T25206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.827366][T25206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.415463][T25206] hsr_slave_0: entered promiscuous mode [ 1678.424634][T25206] hsr_slave_1: entered promiscuous mode [ 1678.434901][T25206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1678.461886][T25206] Cannot create hsr debugfs directory [ 1678.614126][T24867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1678.832111][T24867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1678.883936][T24867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1678.939474][T20357] bridge_slave_1: left allmulticast mode [ 1678.945218][T20357] bridge_slave_1: left promiscuous mode [ 1678.959873][T20357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.012071][T20357] bridge_slave_0: left allmulticast mode [ 1679.017784][T20357] bridge_slave_0: left promiscuous mode [ 1679.036437][T20357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.290969][T20357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.389620][T20357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.441783][T20357] bond0 (unregistering): Released all slaves [ 1681.557839][T24867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1682.729038][T20357] hsr_slave_0: left promiscuous mode [ 1682.769181][T20357] hsr_slave_1: left promiscuous mode [ 1682.775306][T20357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.788319][T20357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.842510][T20357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.851664][T20357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.952110][T20357] veth1_macvtap: left promiscuous mode [ 1682.957759][T20357] veth0_macvtap: left promiscuous mode [ 1682.968434][T20357] veth1_vlan: left promiscuous mode [ 1682.979402][T20357] veth0_vlan: left promiscuous mode [ 1685.370125][T20357] team0 (unregistering): Port device team_slave_1 removed [ 1685.610421][T20357] team0 (unregistering): Port device team_slave_0 removed [ 1688.370643][T26130] QAT: failed to copy from user. [ 1688.543468][T24867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.604888][T24867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.658895][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.666111][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.892416][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.899620][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.175673][T25206] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1689.232778][T25206] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1689.320598][T25206] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1689.373094][T25206] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1689.404939][T26188] CUSE: DEVNAME unspecified [ 1689.661783][T25206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.713357][T25206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.745080][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.752278][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.777243][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.784565][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.817420][T24867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.915888][T25206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1690.376998][T25206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.212082][T21184] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.306045][T24867] veth0_vlan: entered promiscuous mode [ 1691.450623][T21184] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.526262][T24867] veth1_vlan: entered promiscuous mode [ 1691.611929][T15209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1691.621000][T15209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1691.633506][T15209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1691.643018][T15209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1691.661244][T15209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.699644][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1691.709989][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1691.718900][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1691.734424][T21184] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.747010][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1691.761706][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.940627][T21184] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.096168][T24867] veth0_macvtap: entered promiscuous mode [ 1692.162262][T24867] veth1_macvtap: entered promiscuous mode [ 1692.187819][T25206] veth0_vlan: entered promiscuous mode [ 1692.318431][T24867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.383753][T25206] veth1_vlan: entered promiscuous mode [ 1692.435815][T24867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1692.453518][T21184] bridge_slave_1: left allmulticast mode [ 1692.471728][T21184] bridge_slave_1: left promiscuous mode [ 1692.477596][T21184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.580283][T21184] bridge_slave_0: left allmulticast mode [ 1692.586013][T21184] bridge_slave_0: left promiscuous mode [ 1692.592678][T21184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.846542][T15209] Bluetooth: hci3: command tx timeout [ 1694.719742][T21184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1694.810258][T21184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1694.890703][T21184] bond0 (unregistering): Released all slaves [ 1695.033404][T24867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.047470][T24867] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.056347][T24867] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.065222][T24867] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.356625][T25206] veth0_macvtap: entered promiscuous mode [ 1695.466503][T25206] veth1_macvtap: entered promiscuous mode [ 1695.754022][T26346] chnl_net:caif_netlink_parms(): no params data found [ 1695.914192][T15209] Bluetooth: hci3: command tx timeout [ 1696.138779][T21184] hsr_slave_0: left promiscuous mode [ 1696.178877][T21184] hsr_slave_1: left promiscuous mode [ 1696.184820][T21184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.194091][T21184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.250303][T21184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.257780][T21184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.346306][T21184] veth1_macvtap: left promiscuous mode [ 1696.352140][T21184] veth0_macvtap: left promiscuous mode [ 1696.357819][T21184] veth1_vlan: left promiscuous mode [ 1696.363928][T21184] veth0_vlan: left promiscuous mode [ 1697.988851][T15209] Bluetooth: hci3: command tx timeout [ 1698.820520][T21184] team0 (unregistering): Port device team_slave_1 removed [ 1699.110716][T21184] team0 (unregistering): Port device team_slave_0 removed [ 1700.068795][T15209] Bluetooth: hci3: command tx timeout [ 1701.880822][T26530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1701.886802][T26530] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1701.909796][T25206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.961884][T25206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.096972][T25206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.139759][T25206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.148589][T25206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.166513][T25206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.321494][T26346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.331537][T26346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.340142][T26346] bridge_slave_0: entered allmulticast mode [ 1702.348094][T26346] bridge_slave_0: entered promiscuous mode [ 1702.376764][T26346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.385799][T26346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.394328][T26346] bridge_slave_1: entered allmulticast mode [ 1702.404854][T26346] bridge_slave_1: entered promiscuous mode [ 1702.646580][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.666886][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.701046][T26346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.997785][T26346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.456882][T26346] team0: Port device team_slave_0 added [ 1703.471087][T26346] team0: Port device team_slave_1 added [ 1703.629336][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.637304][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.244438][T26346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.259501][T26346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.300378][T26346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.322020][T26346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.329903][T26346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.371069][T26346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.925284][T26781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1704.976079][T26346] hsr_slave_0: entered promiscuous mode [ 1704.993092][T26346] hsr_slave_1: entered promiscuous mode [ 1705.001048][T26346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1705.008738][T26346] Cannot create hsr debugfs directory [ 1706.370635][T26882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1707.042770][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.255310][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1707.264505][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1707.276382][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1707.284650][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1707.293309][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1707.368337][T15209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1707.388033][T15209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1707.395510][T15209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1707.409611][T15209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1707.419127][T15209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1707.427839][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.027547][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.645032][T26985] input: syz0 as /devices/virtual/input/input463 [ 1708.656571][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.509563][ T5850] Bluetooth: hci2: command tx timeout [ 1710.529904][ T13] bridge_slave_1: left allmulticast mode [ 1710.545926][ T13] bridge_slave_1: left promiscuous mode [ 1710.558268][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.661209][ T13] bridge_slave_0: left allmulticast mode [ 1710.670674][ T13] bridge_slave_0: left promiscuous mode [ 1710.676580][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.416849][T27160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1711.600092][ T5850] Bluetooth: hci2: command tx timeout [ 1712.659392][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.739500][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.780699][ T13] bond0 (unregistering): Released all slaves [ 1713.002867][T26908] chnl_net:caif_netlink_parms(): no params data found [ 1713.028030][T27049] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1713.051792][T27049] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1713.492989][T27231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1713.933416][T26346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1713.997152][T26346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1714.270339][ T13] hsr_slave_0: left promiscuous mode [ 1714.372513][ T13] hsr_slave_1: left promiscuous mode [ 1714.378812][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.386339][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.482115][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.492107][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.549427][ T13] veth1_macvtap: left promiscuous mode [ 1714.569969][ T13] veth0_macvtap: left promiscuous mode [ 1714.578126][ T13] veth1_vlan: left promiscuous mode [ 1714.591693][ T13] veth0_vlan: left promiscuous mode [ 1716.300774][T27275] ALSA: mixer_oss: invalid OSS volume '' [ 1716.919642][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1717.161208][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1719.642004][T26346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1719.709288][T26908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.728838][T26908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.736101][T26908] bridge_slave_0: entered allmulticast mode [ 1719.751073][T26908] bridge_slave_0: entered promiscuous mode [ 1719.761359][T26346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1719.818562][T26908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.829155][T26908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.836468][T26908] bridge_slave_1: entered allmulticast mode [ 1719.871025][T26908] bridge_slave_1: entered promiscuous mode [ 1720.201577][T26908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.232084][T26908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.381960][T27360] program syz.6.11945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1720.513822][T26908] team0: Port device team_slave_0 added [ 1720.535697][T26908] team0: Port device team_slave_1 added [ 1720.741587][T26908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.753645][T26908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.783478][T26908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.014823][T26908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.027782][T26908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.061753][T26908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.335910][T26908] hsr_slave_0: entered promiscuous mode [ 1721.350722][T26908] hsr_slave_1: entered promiscuous mode [ 1721.369338][T26908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1721.378836][T26908] Cannot create hsr debugfs directory [ 1721.558454][T27430] vivid-003: disconnect [ 1721.620796][T28910] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1721.655905][T28910] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1721.721097][T27429] vivid-003: reconnect [ 1721.781797][T26346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.843205][T27473] fido_id[27473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1722.052428][T26346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.152345][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.159593][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.334934][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.342150][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.354992][T26346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.584539][T26908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1723.770442][T26908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1723.823576][T26908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1723.891367][T26908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1724.053774][ T13] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1724.174781][T26908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.242042][T26908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.272555][T21184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.279764][T21184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.325356][T21184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.332602][T21184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.410302][T26346] veth0_vlan: entered promiscuous mode [ 1724.448527][T26346] veth1_vlan: entered promiscuous mode [ 1724.507004][T26346] veth0_macvtap: entered promiscuous mode [ 1724.517575][T26346] veth1_macvtap: entered promiscuous mode [ 1724.555225][T26346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.589234][T26346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.611673][T26346] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.623712][T26346] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.635575][T26346] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.649467][T26346] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.893331][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.918331][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.979918][T26908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.995029][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.007241][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.525286][T26908] veth0_vlan: entered promiscuous mode [ 1725.563280][T26908] veth1_vlan: entered promiscuous mode [ 1725.619858][T27683] mkiss: ax0: crc mode is auto. [ 1725.653895][T26908] veth0_macvtap: entered promiscuous mode [ 1725.688262][T26908] veth1_macvtap: entered promiscuous mode [ 1725.724012][T26908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.744559][T26908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.762355][T26908] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.775567][T26908] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.784946][T26908] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.794483][T26908] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.069601][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1727.370758][T27770] program syz.7.11965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1728.043928][T11567] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.657225][T27798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1728.899858][T15209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1728.913636][T11567] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.924600][T15209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1728.940356][T15209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1728.957700][T27605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1728.974744][T27605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1728.988872][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1729.021115][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1729.028481][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1729.046601][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1729.055831][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1729.315522][T11567] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.430334][T27865] loop8: detected capacity change from 0 to 7 [ 1729.449617][T26934] Dev loop8: unable to read RDB block 7 [ 1729.485093][T26934] loop8: unable to read partition table [ 1729.517212][T26934] loop8: partition table beyond EOD, truncated [ 1729.535552][T27865] Dev loop8: unable to read RDB block 7 [ 1729.563331][T27865] loop8: unable to read partition table [ 1729.579569][T27865] loop8: partition table beyond EOD, truncated [ 1729.589546][T27865] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1729.652195][T11567] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.236890][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.254158][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.664763][T27812] chnl_net:caif_netlink_parms(): no params data found [ 1730.763510][T11567] bridge_slave_1: left allmulticast mode [ 1730.776694][T11567] bridge_slave_1: left promiscuous mode [ 1730.802285][T11567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.109731][ T5850] Bluetooth: hci2: command tx timeout [ 1731.122210][T11567] bridge_slave_0: left allmulticast mode [ 1731.153936][T11567] bridge_slave_0: left promiscuous mode [ 1731.159836][T11567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.238727][T27989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1731.244808][T27989] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1733.701099][T11567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1733.759512][T11567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1733.802498][T11567] bond0 (unregistering): Released all slaves [ 1734.561733][T28123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.721937][T27812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.741678][T27812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.762604][T27812] bridge_slave_0: entered allmulticast mode [ 1734.782065][T27812] bridge_slave_0: entered promiscuous mode [ 1735.032277][T11567] hsr_slave_0: left promiscuous mode [ 1735.088954][T11567] hsr_slave_1: left promiscuous mode [ 1735.111854][T11567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.130529][T11567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.181722][T11567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.211956][T11567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.305515][T28159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1735.323111][T11567] veth1_macvtap: left promiscuous mode [ 1735.337399][T11567] veth0_macvtap: left promiscuous mode [ 1735.343565][T11567] veth1_vlan: left promiscuous mode [ 1735.353282][T11567] veth0_vlan: left promiscuous mode [ 1737.762675][T11567] team0 (unregistering): Port device team_slave_1 removed [ 1738.010260][T11567] team0 (unregistering): Port device team_slave_0 removed [ 1740.362287][T27812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.369589][T27812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.376774][T27812] bridge_slave_1: entered allmulticast mode [ 1740.384163][T27812] bridge_slave_1: entered promiscuous mode [ 1740.640750][T27812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.660217][T28231] program syz.6.12003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1740.672227][T27812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.706179][T28231] program syz.6.12003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1740.738756][T28231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1740.773581][T28231] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1740.797764][T28231] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1740.837442][T28246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.906528][T28264] CUSE: info not properly terminated [ 1741.043993][T27812] team0: Port device team_slave_0 added [ 1741.072139][T27812] team0: Port device team_slave_1 added [ 1741.793205][T27812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.809081][T27812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.857465][T27812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.873043][T27812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.898693][T27812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.962562][T27812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.307929][T27812] hsr_slave_0: entered promiscuous mode [ 1742.347782][T27812] hsr_slave_1: entered promiscuous mode [ 1742.365616][T27812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1742.385924][T27812] Cannot create hsr debugfs directory [ 1744.457042][T27812] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1744.470132][T28515] input: syz1 as /devices/virtual/input/input467 [ 1744.534271][T27812] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1744.619852][T27812] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1744.739013][T27812] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1744.851691][T28534] usb usb9: usbfs: process 28534 (syz.7.12019) did not claim interface 0 before use [ 1745.084781][T27812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.238855][T28545] input: syz1 as /devices/virtual/input/input468 [ 1745.243236][T27812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.295606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.302832][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.387442][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.394690][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1746.160684][T27812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.761915][T27812] veth0_vlan: entered promiscuous mode [ 1746.777753][T27812] veth1_vlan: entered promiscuous mode [ 1746.851385][T27812] veth0_macvtap: entered promiscuous mode [ 1746.875509][T27812] veth1_macvtap: entered promiscuous mode [ 1746.910883][T27812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.923412][T28596] FAULT_INJECTION: forcing a failure. [ 1746.923412][T28596] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.937844][T28596] CPU: 1 UID: 0 PID: 28596 Comm: syz.7.12028 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1746.937873][T28596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1746.937888][T28596] Call Trace: [ 1746.937896][T28596] [ 1746.937906][T28596] dump_stack_lvl+0x189/0x250 [ 1746.937938][T28596] ? __pfx____ratelimit+0x10/0x10 [ 1746.937971][T28596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.937996][T28596] ? __pfx__printk+0x10/0x10 [ 1746.938023][T28596] ? __pfx___might_resched+0x10/0x10 [ 1746.938056][T28596] ? fs_reclaim_acquire+0x7d/0x100 [ 1746.938092][T28596] should_fail_ex+0x414/0x560 [ 1746.938125][T28596] should_failslab+0xa8/0x100 [ 1746.938167][T28596] __kmalloc_noprof+0xcb/0x4f0 [ 1746.938191][T28596] ? tomoyo_encode+0x28b/0x550 [ 1746.938219][T28596] tomoyo_encode+0x28b/0x550 [ 1746.938267][T28596] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1746.938303][T28596] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1746.938348][T28596] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1746.938381][T28596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1746.938448][T28596] ? __lock_acquire+0xab9/0xd20 [ 1746.938492][T28596] ? __fget_files+0x2a/0x420 [ 1746.938526][T28596] ? __fget_files+0x2a/0x420 [ 1746.938556][T28596] ? __fget_files+0x3a0/0x420 [ 1746.938585][T28596] ? __fget_files+0x2a/0x420 [ 1746.938620][T28596] security_file_ioctl+0xcb/0x2d0 [ 1746.938658][T28596] __se_sys_ioctl+0x47/0x170 [ 1746.938687][T28596] do_syscall_64+0xfa/0x3b0 [ 1746.938708][T28596] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.938740][T28596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.938761][T28596] ? clear_bhb_loop+0x60/0xb0 [ 1746.938786][T28596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.938806][T28596] RIP: 0033:0x7f4ea0f8e929 [ 1746.938825][T28596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1746.938844][T28596] RSP: 002b:00007f4ea1d23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.938866][T28596] RAX: ffffffffffffffda RBX: 00007f4ea11b5fa0 RCX: 00007f4ea0f8e929 [ 1746.938881][T28596] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 1746.938896][T28596] RBP: 00007f4ea1d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.938909][T28596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1746.938921][T28596] R13: 0000000000000000 R14: 00007f4ea11b5fa0 R15: 00007fff7abd0b38 [ 1746.938954][T28596] [ 1747.179022][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.189653][T27812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1747.203688][T27812] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.208885][T28596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1747.212503][T27812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.227925][T27812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.227959][T27812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.519326][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.547165][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.562897][ T30] audit: type=1400 audit(1750381511.293:62): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2221D01A0B978D2F2F262D2A83D1 pid=28603 comm="syz.7.12032" [ 1747.652371][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.652392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.084571][T28685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.018157][T28731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.172190][T28743] binder: 28741:28743 ioctl c0306201 200000000100 returned -22 [ 1751.085473][T27112] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1751.152129][T27112] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1752.388368][T28862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.762667][T28898] tap0: tun_chr_ioctl cmd 1074025677 [ 1752.776609][T28898] tap0: linktype set to 774 [ 1753.058461][T28914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1753.068327][T28918] slcan: can't register candev [ 1753.075963][T28918] Falling back ldisc for ptm1. [ 1753.082931][T28920] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1753.430848][T28938] blktrace: Concurrent blktraces are not allowed on sg0 [ 1753.456596][T28938] CUSE: info not properly terminated [ 1753.457321][T28941] mkiss: ax0: crc mode is auto. [ 1753.581477][T28946] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1755.202073][T28987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.629990][T29011] CUSE: info not properly terminated [ 1755.661356][T29011] input: syz1 as /devices/virtual/input/input469 [ 1757.135134][T29058] ubi: mtd0 is already attached to ubi31 [ 1758.691447][T29096] input: syz0 as /devices/virtual/input/input470 [ 1758.838063][T29101] syz.3.12122: attempt to access beyond end of device [ 1758.838063][T29101] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1759.232767][T29124] binder: 29122:29124 ioctl c0306201 200000000540 returned -14 [ 1760.510200][T29146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1761.806533][T29205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1761.854281][T29208] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1762.363213][T29227] QAT: failed to copy from user cfg_data. [ 1764.489282][T29296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.536515][T29296] input: syz1 as /devices/virtual/input/input472 [ 1764.999935][T29316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1765.519505][T29330] syz.3.12165: attempt to access beyond end of device [ 1765.519505][T29330] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1766.058952][T29351] sp0: Synchronizing with TNC [ 1766.766056][T29377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1767.472396][T29400] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1767.694816][T29410] No buffer was provided with the request [ 1768.129852][T29424] No buffer was provided with the request [ 1771.540530][T29568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.032084][T29661] syz.6.12232: vmalloc error: size 47185920, failed to allocated page array size 92160, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1774.055312][T29661] CPU: 1 UID: 0 PID: 29661 Comm: syz.6.12232 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1774.055340][T29661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.055352][T29661] Call Trace: [ 1774.055361][T29661] [ 1774.055369][T29661] dump_stack_lvl+0x189/0x250 [ 1774.055420][T29661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.055448][T29661] ? __pfx__printk+0x10/0x10 [ 1774.055472][T29661] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1774.055501][T29661] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1774.055531][T29661] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1774.055561][T29661] warn_alloc+0x214/0x310 [ 1774.055597][T29661] ? __pfx_warn_alloc+0x10/0x10 [ 1774.055634][T29661] ? __get_vm_area_node+0x28f/0x300 [ 1774.055661][T29661] ? vb2_vmalloc_alloc+0xef/0x340 [ 1774.055689][T29661] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1774.055747][T29661] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1774.055781][T29661] ? __kasan_kmalloc+0x93/0xb0 [ 1774.055810][T29661] vmalloc_user_noprof+0xad/0xf0 [ 1774.055837][T29661] ? vb2_vmalloc_alloc+0xef/0x340 [ 1774.055861][T29661] vb2_vmalloc_alloc+0xef/0x340 [ 1774.055883][T29661] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1774.055907][T29661] __vb2_queue_alloc+0x9bf/0x15a0 [ 1774.055955][T29661] vb2_core_reqbufs+0xc31/0x1420 [ 1774.055996][T29661] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1774.056035][T29661] ? __vb2_init_fileio+0x1e8/0xff0 [ 1774.056063][T29661] __vb2_init_fileio+0x318/0xff0 [ 1774.056099][T29661] ? __pfx___mutex_lock+0x10/0x10 [ 1774.056125][T29661] __vb2_perform_fileio+0x284/0x1600 [ 1774.056166][T29661] vb2_fop_read+0x273/0x360 [ 1774.056195][T29661] v4l2_read+0x199/0x2c0 [ 1774.056214][T29661] ? __pfx_v4l2_read+0x10/0x10 [ 1774.056237][T29661] vfs_read+0x1fd/0x980 [ 1774.056277][T29661] ? __pfx_vfs_read+0x10/0x10 [ 1774.056306][T29661] ? __fget_files+0x2a/0x420 [ 1774.056339][T29661] ? __fget_files+0x2a/0x420 [ 1774.056368][T29661] ? __fget_files+0x3a0/0x420 [ 1774.056397][T29661] ? __fget_files+0x2a/0x420 [ 1774.056436][T29661] ksys_read+0x145/0x250 [ 1774.056465][T29661] ? __pfx_ksys_read+0x10/0x10 [ 1774.056488][T29661] ? rcu_is_watching+0x15/0xb0 [ 1774.056518][T29661] ? do_syscall_64+0xbe/0x3b0 [ 1774.056542][T29661] do_syscall_64+0xfa/0x3b0 [ 1774.056562][T29661] ? lockdep_hardirqs_on+0x9c/0x150 [ 1774.056605][T29661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.056642][T29661] ? clear_bhb_loop+0x60/0xb0 [ 1774.056667][T29661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.056687][T29661] RIP: 0033:0x7f572c38e929 [ 1774.056706][T29661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.056724][T29661] RSP: 002b:00007f572d277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1774.056745][T29661] RAX: ffffffffffffffda RBX: 00007f572c5b6080 RCX: 00007f572c38e929 [ 1774.056761][T29661] RDX: 0000000000000013 RSI: 0000200000000180 RDI: 0000000000000004 [ 1774.056773][T29661] RBP: 00007f572c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1774.056786][T29661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.056798][T29661] R13: 0000000000000000 R14: 00007f572c5b6080 R15: 00007ffcd31ab3d8 [ 1774.056830][T29661] [ 1774.056913][T29661] Mem-Info: [ 1774.396635][T29661] active_anon:12301 inactive_anon:0 isolated_anon:0 [ 1774.396635][T29661] active_file:4034 inactive_file:44640 isolated_file:0 [ 1774.396635][T29661] unevictable:769 dirty:2137 writeback:0 [ 1774.396635][T29661] slab_reclaimable:12681 slab_unreclaimable:98067 [ 1774.396635][T29661] mapped:25640 shmem:5563 pagetables:1601 [ 1774.396635][T29661] sec_pagetables:3 bounce:0 [ 1774.396635][T29661] kernel_misc_reclaimable:0 [ 1774.396635][T29661] free:1324260 free_pcp:11014 free_cma:0 [ 1774.444501][T29661] Node 0 active_anon:49204kB inactive_anon:0kB active_file:16436kB inactive_file:178360kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:102960kB dirty:8944kB writeback:0kB shmem:20716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:6376kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1774.444557][T29661] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1774.444601][T29661] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.444653][T29661] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1774.444694][T29661] Node 0 DMA32 free:1362076kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49160kB inactive_anon:0kB active_file:16436kB inactive_file:177032kB unevictable:1540kB writepending:8944kB present:3129332kB managed:2557540kB mlocked:4kB bounce:0kB free_pcp:43540kB local_pcp:31992kB free_cma:0kB [ 1774.444746][T29661] lowmem_reserve[]: 0 0 1 1 1 [ 1774.444786][T29661] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1774.444835][T29661] lowmem_reserve[]: 0 0 0 0 0 [ 1774.444874][T29661] Node 1 Normal free:3919596kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1774.444925][T29661] lowmem_reserve[]: 0 0 0 0 0 [ 1774.444964][T29661] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1774.445090][T29661] Node 0 DMA32: 3150*4kB (UME) 799*8kB (UME) 753*16kB (UME) 470*32kB (UME) 548*64kB (UME) 283*128kB (UME) 146*256kB (UME) 58*512kB (UME) 22*1024kB (UME) 10*2048kB (UM) 277*4096kB (UM) = 1362048kB [ 1774.445259][T29661] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1774.445366][T29661] Node 1 Normal: 205*4kB (UM) 47*8kB (UME) 34*16kB (UME) 221*32kB (UME) 104*64kB (UME) 29*128kB (UME) 16*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3919596kB [ 1774.445532][T29661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.445548][T29661] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1774.445563][T29661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1774.479135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.755670][T29661] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1774.765094][T29661] 54650 total pagecache pages [ 1774.769990][T29661] 0 pages in swap cache [ 1774.774169][T29661] Free swap = 124996kB [ 1774.778359][T29661] Total swap = 124996kB [ 1774.782665][T29661] 2097051 pages RAM [ 1774.786487][T29661] 0 pages HighMem/MovableOnly [ 1774.796391][T29661] 425688 pages reserved [ 1774.800666][T29661] 0 pages cma reserved [ 1775.105329][T29684] usb usb9: usbfs: process 29684 (syz.6.12238) did not claim interface 0 before use [ 1775.282895][T29690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1778.157964][T29806] random: crng reseeded on system resumption [ 1778.494457][T29823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1779.374579][T29866] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 1780.656029][T29908] ubi: mtd0 is already attached to ubi31 [ 1782.037859][T29957] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1782.595441][T29968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.690150][T29976] input: syz1 as /devices/virtual/input/input474 [ 1782.945986][T29990] blktrace: Concurrent blktraces are not allowed on sg0 [ 1783.009530][T29990] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1784.231236][T30041] sp0: Synchronizing with TNC [ 1784.252613][T30046] sp0: Found TNC [ 1784.665374][T30061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1784.673601][T30038] [U] ` [ 1784.830472][T30067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1789.130967][T30196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1789.151501][T30197] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1790.572127][T30254] syz.6.12349: attempt to access beyond end of device [ 1790.572127][T30254] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1791.012826][T30265] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1791.049957][T30266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1791.064077][T30266] [U] ^R [ 1791.687076][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.693883][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.851055][T30291] ALSA: mixer_oss: invalid OSS volume '' [ 1791.936597][T30295] can0: slcan on pty33. [ 1792.002589][T30300] input: syz1 as /devices/virtual/input/input477 [ 1792.110592][T30300] kvm: kvm [30299]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1792.350082][T30312] mkiss: ax0: crc mode is auto. [ 1792.508681][T30294] can0 (unregistered): slcan off pty33. [ 1795.123206][T30405] input: syz1 as /devices/virtual/input/input478 [ 1795.420482][T30430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1795.548033][T30430] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1797.128168][T30617] mkiss: ax0: crc mode is auto. [ 1797.318888][T30617] mkiss: ax0: crc mode is auto. [ 1797.756730][T30651] program syz.3.12393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1799.895333][T30728] KVM: debugfs: duplicate directory 30728-4 [ 1803.141260][T30887] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1804.741147][T30980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.769756][T30980] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1805.167444][T31016] block nbd7: NBD_DISCONNECT [ 1805.944215][T31133] kvm: user requested TSC rate below hardware speed [ 1806.720367][T31202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1807.967426][T31245] random: crng reseeded on system resumption [ 1808.173363][T31252] random: crng reseeded on system resumption [ 1808.257736][T31259] binder: 31258:31259 ioctl c0306201 2000000003c0 returned -14 [ 1808.280460][T31259] sp0: Synchronizing with TNC [ 1808.307172][T31258] [U] [ 1810.194360][T31450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1812.146039][T31526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1812.948759][T31555] syz.7.12513: attempt to access beyond end of device [ 1812.948759][T31555] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1814.585333][T31613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1814.884854][T31625] binder: 31624:31625 ioctl 400c620e 9999999999999999 returned -14 [ 1815.000693][T31632] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1815.363048][T31642] input: syz1 as /devices/virtual/input/input481 [ 1815.501221][T31644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1816.610287][T31685] random: crng reseeded on system resumption [ 1816.668111][T31686] input: syz1 as /devices/virtual/input/input483 [ 1818.712255][T31780] vivid-000: ================= START STATUS ================= [ 1818.723605][T31780] vivid-000: Generate PTS: true [ 1818.734779][T31780] vivid-000: Generate SCR: true [ 1818.755542][T31780] tpg source WxH: 1280x720 (R'G'B) [ 1818.762226][T31780] tpg field: 1 [ 1818.768065][T31780] tpg crop: (0,0)/1280x720 [ 1818.794494][T31782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1818.818204][T31780] tpg compose: (0,0)/1280x720 [ 1818.833686][T31780] tpg colorspace: 8 [ 1818.840646][T31780] tpg transfer function: 0/2 [ 1818.845293][T31780] tpg quantization: 0/1 [ 1818.853036][T31780] tpg RGB range: 2/1 [ 1818.857044][T31780] vivid-000: ================== END STATUS ================== [ 1820.009928][T31829] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1820.679155][T31840] program syz.3.12568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1821.137688][T31859] dlm: plock device version mismatch: kernel (1.2.0), user (4096.0.6) [ 1821.614249][T31980] input: syz1 as /devices/virtual/input/input485 [ 1822.676323][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.866551][T27605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.876902][T27605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.885927][T27605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1822.895737][T27605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1822.904435][T27605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1822.931694][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.980608][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.996088][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1823.021488][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1823.032340][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1823.112887][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.275979][T32068] input: syz1 as /devices/virtual/input/input486 [ 1823.372368][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.741873][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.457686][T32068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1824.509272][T32068] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1824.810055][ T36] bridge_slave_1: left allmulticast mode [ 1824.815755][ T36] bridge_slave_1: left promiscuous mode [ 1824.858824][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.971540][ T36] bridge_slave_0: left allmulticast mode [ 1825.000082][ T36] bridge_slave_0: left promiscuous mode [ 1825.005860][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.090849][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.182892][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.222620][ T36] bond0 (unregistering): Released all slaves [ 1827.588450][T32034] chnl_net:caif_netlink_parms(): no params data found [ 1827.816294][T32425] input: syz1 as /devices/virtual/input/input487 [ 1827.866294][T32426] Bluetooth: hci4: Frame reassembly failed (-84) [ 1827.895375][ T69] Bluetooth: hci4: Frame reassembly failed (-84) [ 1827.903337][T32426] Bluetooth: hci4: Frame reassembly failed (-84) [ 1829.308330][T32034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.315780][T32034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.323957][T32034] bridge_slave_0: entered allmulticast mode [ 1829.332294][T32034] bridge_slave_0: entered promiscuous mode [ 1829.461417][T32533] tun0: tun_chr_ioctl cmd 1074025676 [ 1829.466869][T32533] tun0: owner set to 0 [ 1829.471789][T32034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.483514][T32034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.491164][T32034] bridge_slave_1: entered allmulticast mode [ 1829.498437][T32034] bridge_slave_1: entered promiscuous mode [ 1829.908744][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1829.929710][ T36] hsr_slave_0: left promiscuous mode [ 1830.036691][ T36] hsr_slave_1: left promiscuous mode [ 1830.042987][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.052780][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.123667][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.128856][T32560] input: syz0 as /devices/virtual/input/input488 [ 1830.138796][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.225118][ T36] veth1_macvtap: left promiscuous mode [ 1830.231371][ T36] veth0_macvtap: left promiscuous mode [ 1830.236977][ T36] veth1_vlan: left promiscuous mode [ 1830.242474][ T36] veth0_vlan: left promiscuous mode [ 1830.623824][T32574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1832.650116][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1832.901332][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1835.835512][T32601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1835.845248][T32034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1836.004682][T32034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1836.311871][T32034] team0: Port device team_slave_0 added [ 1836.332193][T32034] team0: Port device team_slave_1 added [ 1836.587600][T32034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.607230][T32034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.676462][T32034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.700122][T32034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.707130][T32034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.802105][T32034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.569277][T32034] hsr_slave_0: entered promiscuous mode [ 1837.575980][T32034] hsr_slave_1: entered promiscuous mode [ 1837.625789][T32034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1837.656979][T32034] Cannot create hsr debugfs directory [ 1839.187848][ T403] FAULT_INJECTION: forcing a failure. [ 1839.187848][ T403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.201315][ T403] CPU: 0 UID: 0 PID: 403 Comm: syz.6.12623 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1839.201342][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1839.201354][ T403] Call Trace: [ 1839.201362][ T403] [ 1839.201371][ T403] dump_stack_lvl+0x189/0x250 [ 1839.201398][ T403] ? __pfx____ratelimit+0x10/0x10 [ 1839.201429][ T403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1839.201450][ T403] ? __pfx__printk+0x10/0x10 [ 1839.201483][ T403] should_fail_ex+0x414/0x560 [ 1839.201513][ T403] _copy_to_user+0x31/0xb0 [ 1839.201543][ T403] simple_read_from_buffer+0xe1/0x170 [ 1839.201584][ T403] proc_fail_nth_read+0x1df/0x250 [ 1839.201621][ T403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1839.201642][ T403] ? rw_verify_area+0x258/0x650 [ 1839.201665][ T403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1839.201684][ T403] vfs_read+0x1fd/0x980 [ 1839.201713][ T403] ? __pfx___mutex_lock+0x10/0x10 [ 1839.201732][ T403] ? __pfx_vfs_read+0x10/0x10 [ 1839.201758][ T403] ? __fget_files+0x2a/0x420 [ 1839.201789][ T403] ? __fget_files+0x3a0/0x420 [ 1839.201815][ T403] ? __fget_files+0x2a/0x420 [ 1839.201851][ T403] ksys_read+0x145/0x250 [ 1839.201878][ T403] ? __pfx_ksys_read+0x10/0x10 [ 1839.201899][ T403] ? rcu_is_watching+0x15/0xb0 [ 1839.201926][ T403] ? do_syscall_64+0xbe/0x3b0 [ 1839.201949][ T403] do_syscall_64+0xfa/0x3b0 [ 1839.201966][ T403] ? lockdep_hardirqs_on+0x9c/0x150 [ 1839.201994][ T403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.202013][ T403] ? clear_bhb_loop+0x60/0xb0 [ 1839.202035][ T403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.202053][ T403] RIP: 0033:0x7f572c38d33c [ 1839.202071][ T403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1839.202086][ T403] RSP: 002b:00007f572d298030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1839.202106][ T403] RAX: ffffffffffffffda RBX: 00007f572c5b5fa0 RCX: 00007f572c38d33c [ 1839.202120][ T403] RDX: 000000000000000f RSI: 00007f572d2980a0 RDI: 0000000000000004 [ 1839.202132][ T403] RBP: 00007f572d298090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.202144][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.202156][ T403] R13: 0000000000000000 R14: 00007f572c5b5fa0 R15: 00007ffcd31ab3d8 [ 1839.202184][ T403] [ 1839.908978][ T424] input: syz1 as /devices/virtual/input/input489 [ 1839.945193][ T424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1840.128377][T32034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1840.228504][T32034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1840.298473][T32034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1840.343675][T32034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1840.632895][T32034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1840.672723][T32034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1840.707150][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.714414][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.770148][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.777387][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.885461][T32034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1841.194096][ T482] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 1841.371996][T32034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.331298][T32034] veth0_vlan: entered promiscuous mode [ 1842.350778][T32034] veth1_vlan: entered promiscuous mode [ 1842.394851][T32034] veth0_macvtap: entered promiscuous mode [ 1842.406818][T32034] veth1_macvtap: entered promiscuous mode [ 1842.477094][T32034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1842.520333][T32034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1842.548262][T32034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.578137][T32034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.603122][T32034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.627332][T32034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.979009][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.028728][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.106238][ T553] can0: slcan on ptm0. [ 1843.131336][T11567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.164118][T11567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.005174][ T523] can0 (unregistered): slcan off ptm0. [ 1845.108921][T27605] Bluetooth: hci4: command 0x1003 tx timeout [ 1845.116218][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1845.364143][ T680] binder: 676:680 ioctl c018620c 200000000140 returned -22 [ 1845.679359][ T688] input: syz1 as /devices/virtual/input/input490 [ 1847.319989][ T794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1847.386350][ T794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1848.370568][ T836] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 1849.311658][ T871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1849.955589][ T889] dlm: non-version read from control device 65 [ 1852.123486][ T977] input: syz0 as /devices/virtual/input/input494 [ 1852.443791][ T994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1852.974758][ T1028] i2c i2c-0: Invalid block write size 254 [ 1853.053283][ T1041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1853.116512][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.126680][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.290887][ T1066] binder: 1064:1066 ioctl 400c620e 2000000000c0 returned -22 [ 1854.751946][ T1131] input: syz1 as /devices/virtual/input/input495 [ 1854.791578][ T1131] program syz.7.12737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1856.797135][ T1234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1859.838512][ T1387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1860.110960][ T1421] input: syz1 as /devices/virtual/input/input496 [ 1860.336735][ T1444] binder: 1443:1444 ioctl 80184560 2000000021c0 returned -22 [ 1860.362901][ T1444] binder: 1443:1444 ioctl c00c620f 200000000180 returned -22 [ 1860.402295][ T1444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1860.933626][ T1536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1864.433577][ T1728] input: syz1 as /devices/virtual/input/input498 [ 1864.826594][T11567] Bluetooth: hci4: Frame reassembly failed (-84) [ 1865.802772][ T1795] dlm: non-version read from control device 4096 [ 1866.536091][ T1858] vivid-000: disconnect [ 1866.561455][ T1858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1866.854584][ T1856] vivid-000: reconnect [ 1866.879084][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1866.886031][T27605] Bluetooth: hci4: command 0x1003 tx timeout [ 1867.940047][ T1933] usb usb8: usbfs: process 1933 (syz.8.12846) did not claim interface 0 before use [ 1869.032041][ T1967] ALSA: seq fatal error: cannot create timer (-22) [ 1869.902089][ T2006] dlm: no locking on control device [ 1870.011138][ T2009] sp0: Synchronizing with TNC [ 1870.401845][ T2025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1871.077987][ T2058] binder: 2056:2058 ioctl c0306201 200000000640 returned -22 [ 1871.942669][ T2093] snd_dummy snd_dummy.0: control 1:254:0:syz0:32 is already present [ 1873.176054][ T2135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1874.060397][ T2169] CUSE: info not properly terminated [ 1874.131534][ T2169] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1880.366146][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.752789][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.924004][T27605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1880.939650][T27605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1880.950031][T27605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1880.959245][T27605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1880.969593][T27605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1881.044293][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1881.058679][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1881.070039][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1881.080709][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1881.094575][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1881.335253][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.736121][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.326710][ T2578] chnl_net:caif_netlink_parms(): no params data found [ 1882.354871][ T2617] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1882.399959][ T2617] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1882.501409][ T69] bridge_slave_1: left allmulticast mode [ 1882.511238][ T69] bridge_slave_1: left promiscuous mode [ 1882.517047][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.563933][ T2994] Bluetooth: hci4: Frame reassembly failed (-84) [ 1882.612005][ T69] bridge_slave_0: left allmulticast mode [ 1882.619101][ T69] bridge_slave_0: left promiscuous mode [ 1882.625053][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.548766][T27605] Bluetooth: hci4: command 0xfc11 tx timeout [ 1884.555458][ T5850] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1885.119593][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1885.189409][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1885.250551][ T69] bond0 (unregistering): Released all slaves [ 1885.873238][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.902236][ T2578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.925714][ T2578] bridge_slave_0: entered allmulticast mode [ 1885.959215][ T2578] bridge_slave_0: entered promiscuous mode [ 1885.979878][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.987055][ T2578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.006640][ T2578] bridge_slave_1: entered allmulticast mode [ 1886.032304][ T2578] bridge_slave_1: entered promiscuous mode [ 1886.526276][ T2578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.562829][ T2578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.739352][ T3004] mkiss: ax0: crc mode is auto. [ 1886.879976][ T69] hsr_slave_0: left promiscuous mode [ 1886.921825][ T69] hsr_slave_1: left promiscuous mode [ 1886.945954][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1887.108370][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.181894][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.210739][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.340014][ T3036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1887.353885][ T69] veth1_macvtap: left promiscuous mode [ 1887.364247][ T69] veth0_macvtap: left promiscuous mode [ 1887.376415][ T3036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1887.377368][ T69] veth1_vlan: left promiscuous mode [ 1887.395860][ T69] veth0_vlan: left promiscuous mode [ 1888.729948][ T3124] ubi: mtd0 is already attached to ubi31 [ 1889.416411][ T3225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1889.428361][ T3225] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1889.949281][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1890.161224][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1890.443783][ T3252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1892.864103][ T2578] team0: Port device team_slave_0 added [ 1892.881784][ T2578] team0: Port device team_slave_1 added [ 1893.099856][ T2578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.107180][ T2578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.148743][ T2578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.178803][ T2578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.185797][ T2578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.211685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1893.233952][ T2578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1893.647656][ T2578] hsr_slave_0: entered promiscuous mode [ 1893.680914][ T2578] hsr_slave_1: entered promiscuous mode [ 1893.687362][ T2578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1893.716159][ T2578] Cannot create hsr debugfs directory [ 1893.976704][ T3409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1896.190910][ T3543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1896.778139][ T2578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1896.852644][ T2578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1896.955872][ T2578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1896.995863][ T2578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1897.177992][ T2578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1897.226133][ T2578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.261520][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.268850][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1897.312000][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.319276][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1897.890968][ T2578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.021279][ T2578] veth0_vlan: entered promiscuous mode [ 1898.053273][ T2578] veth1_vlan: entered promiscuous mode [ 1898.145038][ T2578] veth0_macvtap: entered promiscuous mode [ 1898.178770][ T2578] veth1_macvtap: entered promiscuous mode [ 1898.263037][ T2578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.333615][ T2578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.366520][ T2578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.379055][ T2578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.388051][ T2578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.453976][ T2578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.897104][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.934960][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.013505][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.029400][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.443221][ T3684] input: syz1 as /devices/virtual/input/input504 [ 1901.081333][ T3765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1903.644504][ T3890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1903.688308][ T3890] random: crng reseeded on system resumption [ 1905.161310][ T3962] usb usb1: usbfs: process 3962 (syz.3.13054) did not claim interface 0 before use [ 1905.528101][ T3973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1905.579599][ T3979] usb usb1: usbfs: process 3979 (syz.6.13059) did not claim interface 0 before use [ 1905.709731][ T3984] [U]  [ 1905.714681][ T3984] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1907.531179][ T4045] kvm: user requested TSC rate below hardware speed [ 1907.816456][ T4064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1909.484443][ T4097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1910.696032][ T4151] sp0: Synchronizing with TNC [ 1910.718332][ T4150] [U] [ 1914.524387][ T4415] kvm: kvm [4413]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 1914.565304][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.565357][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.749354][ T4427] vivid-003: ================= START STATUS ================= [ 1914.757158][ T4427] vivid-003: Radio HW Seek Mode: Bounded [ 1914.803950][ T4427] vivid-003: Radio Programmable HW Seek: false [ 1914.818216][ T4427] vivid-003: RDS Rx I/O Mode: Block I/O [ 1914.842684][ T4432] binder: 4429:4432 ioctl c018620c 200000001180 returned -22 [ 1914.843931][ T4427] vivid-003: Generate RBDS Instead of RDS: false [ 1914.858342][ T4427] vivid-003: RDS Reception: true [ 1914.864201][ T4427] vivid-003: RDS Program Type: 0 inactive [ 1914.876469][ T4427] vivid-003: RDS PS Name: inactive [ 1914.883578][ T4427] vivid-003: RDS Radio Text: inactive [ 1914.918009][ T4427] vivid-003: RDS Traffic Announcement: false inactive [ 1914.934463][ T4427] vivid-003: RDS Traffic Program: false inactive [ 1914.947289][ T4427] vivid-003: RDS Music: false inactive [ 1914.959535][ T4427] vivid-003: ================== END STATUS ================== [ 1915.297909][ T4449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1916.880847][ T4522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1917.559172][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 1918.338628][ T4578] can0: slcan on ptm1. [ 1918.592633][ T4576] can0 (unregistered): slcan off ptm1. [ 1919.589038][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1920.312851][ T4649] Bluetooth: hci4: Frame reassembly failed (-84) [ 1920.340862][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 1922.320108][ T5850] Bluetooth: hci4: command 0xfc11 tx timeout [ 1922.326766][T27605] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1923.286436][ T4772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1924.177829][ T4810] loop8: detected capacity change from 0 to 524287999 [ 1924.212481][ T4323] Buffer I/O error on dev loop8, logical block 65535999, async page read [ 1924.861198][ T4323] Buffer I/O error on dev loop8, logical block 65535999, async page read [ 1925.121610][ T4826] syz.7.13196: attempt to access beyond end of device [ 1925.121610][ T4826] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1927.741403][ T4921] mkiss: ax0: crc mode is auto. [ 1928.627844][ T4971] usb usb9: usbfs: process 4971 (syz.6.13229) did not claim interface 0 before use [ 1928.830661][ T4985] syz.8.13234: attempt to access beyond end of device [ 1928.830661][ T4985] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1928.874659][ T4989] random: crng reseeded on system resumption [ 1928.938451][ T4987] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1929.247861][ T5002] input: syz1 as /devices/virtual/input/input510 [ 1934.231377][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.245773][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.254061][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.262202][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.270321][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.278099][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.286329][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.294362][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.303605][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.312126][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.320386][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.328160][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.336376][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.344398][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.352790][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.373054][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.391153][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.408656][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.418867][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.438643][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.446588][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.464835][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.508684][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.511822][ T5149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1934.516456][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.516484][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.560633][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.570050][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.577831][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.589177][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.597366][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.613530][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.635638][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.654299][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.688667][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.696451][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.731338][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.741245][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.751888][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.760327][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.780171][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.789616][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.805777][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.861629][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.870087][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.886938][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.931510][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.943817][ T5178] syz.3.13276: attempt to access beyond end of device [ 1934.943817][ T5178] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1934.948620][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1934.979478][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.071277][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.079626][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.088183][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.096822][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.104709][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.112636][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.120498][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.128269][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.179471][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.187273][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.208679][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.216480][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.229382][ T5185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1935.249253][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.257043][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.276195][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.290432][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.305382][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.316704][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.332903][ T24] hid-generic 0040:FFFFFFFB:0004.0013: unknown main item tag 0x0 [ 1935.347988][ T24] hid-generic 0040:FFFFFFFB:0004.0013: hidraw0: HID v0.08 Device [syz0] on syz1 [ 1935.513192][ T5200] fido_id[5200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1937.167525][ T5269] binder: 5268:5269 ioctl c0306201 200000000540 returned -22 [ 1937.531063][ T5276] program syz.6.13288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1937.568333][ T5276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1937.873524][ T5291] input: syz1 as /devices/virtual/input/input513 [ 1940.689175][ T5390] tun0: tun_chr_ioctl cmd 1074025676 [ 1940.694578][ T5390] tun0: owner set to 0 [ 1941.277592][ T5420] binder: 5419:5420 ioctl c0306201 200000000540 returned -22 [ 1941.648783][ T5429] ALSA: seq fatal error: cannot create timer (-22) [ 1942.594540][ T5461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1943.983396][ T5498] mkiss: ax0: crc mode is auto. [ 1946.719166][ T5631] syz.6.13350: attempt to access beyond end of device [ 1946.719166][ T5631] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1948.515754][ T5728] usb usb8: usbfs: process 5728 (syz.7.13367) did not claim interface 0 before use [ 1949.452472][ T5757] binder: 5756:5757 ioctl c0306201 0 returned -14 [ 1949.804089][ T5775] input: x as /devices/virtual/input/input516 [ 1949.810472][ T5775] input: failed to attach handler leds to device input516, error: -6 [ 1951.682128][ T5870] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 1952.124178][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.643045][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1952.967857][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1952.987635][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1952.997593][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1953.015066][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1953.023131][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1953.047987][T27605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1953.057721][T27605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1953.070624][T27605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1953.105853][T27605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1953.114086][T27605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1953.127914][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.240228][ T5929] input: syz0 as /devices/virtual/input/input518 [ 1953.289044][ T5929] input: failed to attach handler leds to device input518, error: -6 [ 1953.505520][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.235358][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 1954.293268][ T69] bridge_slave_1: left allmulticast mode [ 1954.302085][ T69] bridge_slave_1: left promiscuous mode [ 1954.307951][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.402080][ T69] bridge_slave_0: left allmulticast mode [ 1954.407839][ T69] bridge_slave_0: left promiscuous mode [ 1954.417479][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.892597][ T6044] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1954.899294][ T6044] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1955.995055][ T6143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1956.008453][ T6143] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1956.400349][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.493364][ T6133] Falling back ldisc for ttyprintk. [ 1956.509428][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.582315][ T69] bond0 (unregistering): Released all slaves [ 1957.930726][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.938123][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.945997][ T5898] bridge_slave_0: entered allmulticast mode [ 1957.954766][ T5898] bridge_slave_0: entered promiscuous mode [ 1958.020458][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.032681][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.043026][ T5898] bridge_slave_1: entered allmulticast mode [ 1958.061744][ T5898] bridge_slave_1: entered promiscuous mode [ 1958.733132][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1958.788217][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.541106][ T69] hsr_slave_0: left promiscuous mode [ 1959.598907][ T69] hsr_slave_1: left promiscuous mode [ 1959.607875][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1959.620884][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1959.661160][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1959.688815][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1959.700968][ T6346] syz.7.13424: attempt to access beyond end of device [ 1959.700968][ T6346] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1959.781785][ T69] veth1_macvtap: left promiscuous mode [ 1959.787529][ T69] veth0_macvtap: left promiscuous mode [ 1959.796361][ T69] veth1_vlan: left promiscuous mode [ 1959.801946][ T69] veth0_vlan: left promiscuous mode [ 1962.159348][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1962.419316][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1964.845915][ T5898] team0: Port device team_slave_0 added [ 1964.955935][ T5898] team0: Port device team_slave_1 added [ 1965.273676][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1965.299237][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.368626][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1965.395869][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1965.405214][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1965.437473][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1965.818168][ T5898] hsr_slave_0: entered promiscuous mode [ 1965.844971][ T5898] hsr_slave_1: entered promiscuous mode [ 1965.859344][ T5898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1965.895905][ T5898] Cannot create hsr debugfs directory [ 1965.905291][ T6435] FAULT_INJECTION: forcing a failure. [ 1965.905291][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.935920][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.8.13431 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1965.935948][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.935961][ T6435] Call Trace: [ 1965.935969][ T6435] [ 1965.935978][ T6435] dump_stack_lvl+0x189/0x250 [ 1965.936007][ T6435] ? __pfx____ratelimit+0x10/0x10 [ 1965.936038][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1965.936061][ T6435] ? __pfx__printk+0x10/0x10 [ 1965.936088][ T6435] ? __pfx___might_resched+0x10/0x10 [ 1965.936111][ T6435] ? fs_reclaim_acquire+0x7d/0x100 [ 1965.936143][ T6435] should_fail_ex+0x414/0x560 [ 1965.936173][ T6435] should_failslab+0xa8/0x100 [ 1965.936199][ T6435] __kmalloc_noprof+0xcb/0x4f0 [ 1965.936221][ T6435] ? kfree+0x4d/0x440 [ 1965.936239][ T6435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1965.936268][ T6435] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1965.936294][ T6435] ? tomoyo_domain+0xd9/0x130 [ 1965.936322][ T6435] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1965.936408][ T6435] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1965.936445][ T6435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1965.936498][ T6435] ? __lock_acquire+0xab9/0xd20 [ 1965.936548][ T6435] ? __fget_files+0x2a/0x420 [ 1965.936583][ T6435] ? __fget_files+0x2a/0x420 [ 1965.936613][ T6435] ? __fget_files+0x3a0/0x420 [ 1965.936643][ T6435] ? __fget_files+0x2a/0x420 [ 1965.936679][ T6435] security_file_ioctl+0xcb/0x2d0 [ 1965.936712][ T6435] __se_sys_ioctl+0x47/0x170 [ 1965.936741][ T6435] do_syscall_64+0xfa/0x3b0 [ 1965.936760][ T6435] ? lockdep_hardirqs_on+0x9c/0x150 [ 1965.936793][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.936814][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 1965.936840][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1965.936861][ T6435] RIP: 0033:0x7f8ee5d8e929 [ 1965.936880][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1965.936899][ T6435] RSP: 002b:00007f8ee6c3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1965.936921][ T6435] RAX: ffffffffffffffda RBX: 00007f8ee5fb5fa0 RCX: 00007f8ee5d8e929 [ 1965.936937][ T6435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1965.936951][ T6435] RBP: 00007f8ee6c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.936964][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.936977][ T6435] R13: 0000000000000000 R14: 00007f8ee5fb5fa0 R15: 00007fff71f84528 [ 1965.937012][ T6435] [ 1965.937028][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1966.474491][ T6476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1967.830943][ T6588] FAULT_INJECTION: forcing a failure. [ 1967.830943][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.851031][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.7.13442 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1967.851061][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1967.851074][ T6588] Call Trace: [ 1967.851082][ T6588] [ 1967.851091][ T6588] dump_stack_lvl+0x189/0x250 [ 1967.851119][ T6588] ? __pfx____ratelimit+0x10/0x10 [ 1967.851152][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1967.851173][ T6588] ? __pfx__printk+0x10/0x10 [ 1967.851198][ T6588] ? __pfx___might_resched+0x10/0x10 [ 1967.851223][ T6588] ? fs_reclaim_acquire+0x7d/0x100 [ 1967.851257][ T6588] should_fail_ex+0x414/0x560 [ 1967.851315][ T6588] should_failslab+0xa8/0x100 [ 1967.851345][ T6588] __kmalloc_noprof+0xcb/0x4f0 [ 1967.851368][ T6588] ? tomoyo_encode+0x28b/0x550 [ 1967.851398][ T6588] tomoyo_encode+0x28b/0x550 [ 1967.851426][ T6588] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1967.851453][ T6588] ? tomoyo_domain+0xd9/0x130 [ 1967.851482][ T6588] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1967.851514][ T6588] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1967.851548][ T6588] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1967.851597][ T6588] ? __lock_acquire+0xab9/0xd20 [ 1967.851639][ T6588] ? __fget_files+0x2a/0x420 [ 1967.851672][ T6588] ? __fget_files+0x2a/0x420 [ 1967.851700][ T6588] ? __fget_files+0x3a0/0x420 [ 1967.851727][ T6588] ? __fget_files+0x2a/0x420 [ 1967.851771][ T6588] security_file_ioctl+0xcb/0x2d0 [ 1967.851819][ T6588] __se_sys_ioctl+0x47/0x170 [ 1967.851848][ T6588] do_syscall_64+0xfa/0x3b0 [ 1967.851867][ T6588] ? lockdep_hardirqs_on+0x9c/0x150 [ 1967.851898][ T6588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.851919][ T6588] ? clear_bhb_loop+0x60/0xb0 [ 1967.851943][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1967.851963][ T6588] RIP: 0033:0x7f608a38e929 [ 1967.851982][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1967.851999][ T6588] RSP: 002b:00007f608b25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.852021][ T6588] RAX: ffffffffffffffda RBX: 00007f608a5b5fa0 RCX: 00007f608a38e929 [ 1967.852036][ T6588] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1967.852049][ T6588] RBP: 00007f608b25f090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.852061][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.852074][ T6588] R13: 0000000000000000 R14: 00007f608a5b5fa0 R15: 00007ffe5c747488 [ 1967.852105][ T6588] [ 1967.852127][ T6588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1968.574521][ T6632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1968.657766][ T5898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1968.717003][ T5898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1968.777750][ T5898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1968.846183][ T5898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1969.135618][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1969.170534][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1969.192195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.199432][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1969.285992][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.293212][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1969.393568][ T6687] loop8: detected capacity change from 0 to 7 [ 1969.444007][ T6369] Dev loop8: unable to read RDB block 7 [ 1969.479223][ T6369] loop8: unable to read partition table [ 1969.508963][ T6369] loop8: partition table beyond EOD, truncated [ 1969.562663][ T6687] Dev loop8: unable to read RDB block 7 [ 1969.596449][ T6687] loop8: unable to read partition table [ 1969.606914][ T6687] loop8: partition table beyond EOD, truncated [ 1969.655768][ T6687] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 1969.789115][ T5207] Dev loop8: unable to read RDB block 7 [ 1969.794758][ T5207] loop8: unable to read partition table [ 1969.818293][ T5207] loop8: partition table beyond EOD, truncated [ 1969.963313][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1970.069486][ T5898] veth0_vlan: entered promiscuous mode [ 1970.105525][ T5898] veth1_vlan: entered promiscuous mode [ 1970.195288][ T5898] veth0_macvtap: entered promiscuous mode [ 1970.236355][ T5898] veth1_macvtap: entered promiscuous mode [ 1970.323515][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1970.490805][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1970.535565][ T5898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.588692][ T5898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.609715][ T5898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.638588][ T5898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.984249][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.014606][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.098467][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.118638][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.965111][ T6848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1973.162764][ T6853] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1973.503971][ T6863] input: syz1 as /devices/virtual/input/input519 [ 1974.511663][ T6975] binder: 6973:6975 ioctl 40489426 0 returned -22 [ 1976.000150][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.006503][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.664502][ T7111] misc userio: Begin command sent, but we're already running [ 1978.066196][ T7133] syz.8.13501: attempt to access beyond end of device [ 1978.066196][ T7133] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1978.148881][ T7134] syz.8.13501: attempt to access beyond end of device [ 1978.148881][ T7134] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1978.683041][ T30] audit: type=1400 audit(1750381742.413:63): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2221D01A0B978D2F2F262D2A83D1 pid=7155 comm="syz.7.13506" [ 1978.750482][ T7156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.952786][ T7187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1980.003475][ T7187] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1980.961244][ T7210] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1981.221753][ T7240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1981.562634][ T30] audit: type=1400 audit(1750381745.293:64): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7274 comm="syz.8.13527" [ 1983.593537][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1984.522832][ T7408] binder: 7399:7408 ioctl c018620c 200000000380 returned -22 [ 1984.767744][ T7421] [U] ^R [ 1985.599166][T27605] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1985.972253][ T7478] mkiss: ax0: crc mode is auto. [ 1986.244398][ T7499] binder: BINDER_SET_CONTEXT_MGR already set [ 1986.269277][ T7499] binder: 7498:7499 ioctl 4018620d 200000000240 returned -16 [ 1986.814965][ T7535] loop8: detected capacity change from 0 to 7 [ 1986.858923][ T6369] Dev loop8: unable to read RDB block 7 [ 1986.871810][ T6369] loop8: unable to read partition table [ 1986.890870][ T6369] loop8: partition table beyond EOD, truncated [ 1986.912605][ T7535] Dev loop8: unable to read RDB block 7 [ 1986.929907][ T7535] loop8: unable to read partition table [ 1986.935962][ T7535] loop8: partition table beyond EOD, truncated [ 1986.942834][ T7535] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1987.220901][ T7568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1987.377427][ T7577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1987.767998][ T7599] input: syz1 as /devices/virtual/input/input524 [ 1988.403513][ T7646] input: syz1 as /devices/virtual/input/input526 [ 1988.436208][ T7647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1988.773930][ T7676] [U] ^R [ 1988.786008][ T7676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1989.114191][ T7691] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1989.426591][ T7709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1990.980559][ T7787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1991.288118][ T7805] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1992.155024][ T7828] ALSA: seq fatal error: cannot create timer (-22) [ 1992.815811][ T7854] Sensor A: ================= START STATUS ================= [ 1992.823592][ T7854] Sensor A: Test Pattern: Horizontal 100% Colorbar [ 1992.830320][ T7854] Sensor A: Show Information: None [ 1992.835558][ T7854] Sensor A: Vertical Flip: true [ 1992.840589][ T7854] Sensor A: Horizontal Flip: true [ 1992.845745][ T7854] Sensor A: Brightness: 0 [ 1992.850824][ T7854] Sensor A: Contrast: 0 [ 1992.855099][ T7854] Sensor A: Hue: 0 [ 1992.887008][ T7857] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1992.898883][ T7854] Sensor A: Saturation: 128 [ 1992.913256][ T7857] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1992.913671][ T7854] Sensor A: ================== END STATUS ================== [ 1992.953617][ T7854] tun0: tun_chr_ioctl cmd 1074025675 [ 1992.959116][ T7854] tun0: persist disabled [ 1993.997576][ T7924] binder: 7922:7924 ioctl c0306201 200000000300 returned -14 [ 1994.015009][ T7924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1994.066620][ T7924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1994.336968][ T7950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1994.811336][ T7984] input: syz0 as /devices/virtual/input/input529 [ 1995.123765][ T8006] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1995.335921][ T8019] sp0: Synchronizing with TNC [ 1995.550586][ T8030] input: syz1 as /devices/virtual/input/input530 [ 1995.645888][ T8036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1996.076456][ T8015] [U] [ 1996.753594][ T8109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1996.772998][ T8111] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1996.956290][ T8126] sp0: Synchronizing with TNC [ 1997.423633][ T8159] Scaler: ================= START STATUS ================= [ 1997.434596][ T8159] Scaler: ================== END STATUS ================== [ 1998.039784][ T8186] QAT: failed to copy from user cfg_data. [ 1998.538593][ T8203] tap0: tun_chr_ioctl cmd 1074025677 [ 1998.544134][ T8203] tap0: linktype set to 774 [ 1998.781665][ T8216] program syz.7.13702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1998.927071][ T8219] kvm: kvm [8218]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 1999.850064][ T8262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2001.595825][ T8352] input input532: cannot allocate more than FF_MAX_EFFECTS effects [ 2002.342117][ T8343] ALSA: mixer_oss: invalid OSS volume '' [ 2037.434098][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.440698][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.874534][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.880983][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2150.069370][ T31] INFO: task kworker/0:2:980 blocked for more than 143 seconds. [ 2150.077180][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2150.084892][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.093630][ T31] task:kworker/0:2 state:D stack:23720 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2150.105729][ T31] Workqueue: events rfkill_sync_work [ 2150.111171][ T31] Call Trace: [ 2150.114528][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2150.117497][ T31] __schedule+0x16f5/0x4d00 [ 2150.122361][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2150.127787][ T31] ? schedule+0x165/0x360 [ 2150.132287][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.137211][ T31] ? schedule+0x91/0x360 [ 2150.142504][ T31] schedule+0x165/0x360 [ 2150.146724][ T31] schedule_preempt_disabled+0x13/0x30 [ 2150.156922][ T31] __mutex_lock+0x724/0xe80 [ 2150.161569][ T31] ? __lock_acquire+0xab9/0xd20 [ 2150.166458][ T31] ? __mutex_lock+0x51b/0xe80 [ 2150.175334][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 2150.182568][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2150.198510][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.203794][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2150.258539][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2150.265060][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2150.276168][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 2150.281511][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2150.287279][ T31] rfkill_set_block+0x1cf/0x440 [ 2150.292223][ T31] rfkill_sync_work+0x114/0x200 [ 2150.297107][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2150.303009][ T31] process_scheduled_works+0xae1/0x17b0 [ 2150.309125][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2150.315162][ T31] worker_thread+0x8a0/0xda0 [ 2150.319884][ T31] kthread+0x70e/0x8a0 [ 2150.323994][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2150.329176][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.333804][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2150.339132][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.344378][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.349077][ T31] ret_from_fork+0x3f9/0x770 [ 2150.353694][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2150.358996][ T31] ? __switch_to_asm+0x39/0x70 [ 2150.363806][ T31] ? __switch_to_asm+0x33/0x70 [ 2150.368703][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.373340][ T31] ret_from_fork_asm+0x1a/0x30 [ 2150.378146][ T31] [ 2150.381397][ T31] INFO: task kworker/0:6:28298 blocked for more than 143 seconds. [ 2150.389418][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2150.397068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.405855][ T31] task:kworker/0:6 state:D stack:23816 pid:28298 tgid:28298 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2150.417952][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2150.424745][ T31] Call Trace: [ 2150.428063][ T31] [ 2150.431153][ T31] __schedule+0x16f5/0x4d00 [ 2150.435722][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2150.441205][ T31] ? schedule+0x165/0x360 [ 2150.445574][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.450496][ T31] ? schedule+0x91/0x360 [ 2150.454776][ T31] schedule+0x165/0x360 [ 2150.459046][ T31] schedule_preempt_disabled+0x13/0x30 [ 2150.464534][ T31] __mutex_lock+0x724/0xe80 [ 2150.469445][ T31] ? look_up_lock_class+0x74/0x170 [ 2150.474675][ T31] ? __mutex_lock+0x51b/0xe80 [ 2150.480117][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2150.486489][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2150.491610][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2150.497360][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2150.505097][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2150.511249][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2150.517008][ T31] process_scheduled_works+0xae1/0x17b0 [ 2150.522672][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2150.528860][ T31] worker_thread+0x8a0/0xda0 [ 2150.533485][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2150.539964][ T31] ? __kthread_parkme+0x7b/0x200 [ 2150.544937][ T31] kthread+0x70e/0x8a0 [ 2150.549159][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2150.554320][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.559106][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2150.564329][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.569624][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.574238][ T31] ret_from_fork+0x3f9/0x770 [ 2150.578940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2150.584074][ T31] ? __switch_to_asm+0x39/0x70 [ 2150.590802][ T31] ? __switch_to_asm+0x33/0x70 [ 2150.595598][ T31] ? __pfx_kthread+0x10/0x10 [ 2150.600280][ T31] ret_from_fork_asm+0x1a/0x30 [ 2150.605079][ T31] [ 2150.608152][ T31] INFO: task syz.6.13707:8241 blocked for more than 143 seconds. [ 2150.620799][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2150.628725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.637416][ T31] task:syz.6.13707 state:D stack:25128 pid:8241 tgid:8241 ppid:24867 task_flags:0x400040 flags:0x00004006 [ 2150.649655][ T31] Call Trace: [ 2150.652947][ T31] [ 2150.655901][ T31] __schedule+0x16f5/0x4d00 [ 2150.660529][ T31] ? stack_trace_save+0x9c/0xe0 [ 2150.665418][ T31] ? __lock_acquire+0xab9/0xd20 [ 2150.670432][ T31] ? schedule+0x165/0x360 [ 2150.674812][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.681427][ T31] ? schedule+0x91/0x360 [ 2150.685729][ T31] schedule+0x165/0x360 [ 2150.690016][ T31] schedule_preempt_disabled+0x13/0x30 [ 2150.695527][ T31] __mutex_lock+0x724/0xe80 [ 2150.700403][ T31] ? __mutex_lock+0x51b/0xe80 [ 2150.705111][ T31] ? rfkill_fop_release+0x4b/0x220 [ 2150.710378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2150.715586][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 2150.721238][ T31] rfkill_fop_release+0x4b/0x220 [ 2150.726212][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 2150.731815][ T31] __fput+0x44c/0xa70 [ 2150.735842][ T31] task_work_run+0x1d1/0x260 [ 2150.740527][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2150.745664][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 2150.751178][ T31] exit_to_user_mode_loop+0xec/0x110 [ 2150.756485][ T31] do_syscall_64+0x2bd/0x3b0 [ 2150.761120][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2150.767204][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2150.773394][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2150.778094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2150.784031][ T31] RIP: 0033:0x7f572c38e929 [ 2150.789033][ T31] RSP: 002b:00007ffcd31ab538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2150.797484][ T31] RAX: 0000000000000000 RBX: 00007f572c5b7ba0 RCX: 00007f572c38e929 [ 2150.805495][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2150.813763][ T31] RBP: 00007f572c5b7ba0 R08: 00000000000001cc R09: 0000001ad31ab82f [ 2150.821803][ T31] R10: 00007f572c5b7ac0 R11: 0000000000000246 R12: 00000000001e8554 [ 2150.829856][ T31] R13: 00007f572c5b6240 R14: ffffffffffffffff R15: 00007ffcd31ab650 [ 2150.837866][ T31] [ 2150.840963][ T31] INFO: task syz.6.13707:8243 blocked for more than 144 seconds. [ 2150.848787][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2150.856435][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.865157][ T31] task:syz.6.13707 state:D stack:26760 pid:8243 tgid:8241 ppid:24867 task_flags:0x400140 flags:0x00004004 [ 2150.877645][ T31] Call Trace: [ 2150.881157][ T31] [ 2150.884113][ T31] __schedule+0x16f5/0x4d00 [ 2150.888935][ T31] ? schedule+0x165/0x360 [ 2150.893300][ T31] ? __lock_acquire+0xab9/0xd20 [ 2150.898158][ T31] ? __pfx___schedule+0x10/0x10 [ 2150.903315][ T31] ? schedule+0x91/0x360 [ 2150.907750][ T31] schedule+0x165/0x360 [ 2150.912000][ T31] schedule_timeout+0x9a/0x270 [ 2150.916793][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2150.922469][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2150.927705][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2150.933068][ T31] ? wait_for_completion+0x267/0x5d0 [ 2150.938407][ T31] wait_for_completion+0x2bf/0x5d0 [ 2150.943582][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2150.949309][ T31] ? __flush_work+0xd2/0xbc0 [ 2150.953920][ T31] ? __flush_work+0xd2/0xbc0 [ 2150.958571][ T31] __flush_work+0x9b9/0xbc0 [ 2150.963111][ T31] ? __flush_work+0xd2/0xbc0 [ 2150.967709][ T31] ? __pfx___flush_work+0x10/0x10 [ 2150.972778][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2150.978096][ T31] ? __pfx___cancel_work+0x10/0x10 [ 2150.983275][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 2150.989010][ T31] __cancel_work_sync+0xbe/0x110 [ 2150.993975][ T31] rfkill_unregister+0x92/0x220 [ 2150.998880][ T31] nfc_unregister_device+0x96/0x2a0 [ 2151.004115][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2151.009945][ T31] virtual_ncidev_close+0x56/0x90 [ 2151.015010][ T31] __fput+0x44c/0xa70 [ 2151.019077][ T31] task_work_run+0x1d1/0x260 [ 2151.023703][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2151.029084][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 2151.034588][ T31] exit_to_user_mode_loop+0xec/0x110 [ 2151.040336][ T31] do_syscall_64+0x2bd/0x3b0 [ 2151.044946][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2151.050195][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.056283][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.061025][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.066949][ T31] RIP: 0033:0x7f572c38e929 [ 2151.071423][ T31] RSP: 002b:00007f572d277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2151.079930][ T31] RAX: ffffffffffffffea RBX: 00007f572c5b6080 RCX: 00007f572c38e929 [ 2151.087924][ T31] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2151.095956][ T31] RBP: 00007f572c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2151.103976][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.112092][ T31] R13: 0000000000000000 R14: 00007f572c5b6080 R15: 00007ffcd31ab3d8 [ 2151.120138][ T31] [ 2151.123176][ T31] INFO: task syz.3.13737:8400 blocked for more than 144 seconds. [ 2151.131027][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2151.138692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.147379][ T31] task:syz.3.13737 state:D stack:27144 pid:8400 tgid:8399 ppid:5898 task_flags:0x400040 flags:0x00004004 [ 2151.159738][ T31] Call Trace: [ 2151.163029][ T31] [ 2151.165973][ T31] __schedule+0x16f5/0x4d00 [ 2151.170732][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.175608][ T31] ? schedule+0x165/0x360 [ 2151.180089][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.185012][ T31] ? schedule+0x91/0x360 [ 2151.189322][ T31] schedule+0x165/0x360 [ 2151.193514][ T31] schedule_preempt_disabled+0x13/0x30 [ 2151.199039][ T31] __mutex_lock+0x724/0xe80 [ 2151.203560][ T31] ? __mutex_lock+0x51b/0xe80 [ 2151.208240][ T31] ? rfkill_fop_open+0x12d/0x820 [ 2151.213222][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2151.218286][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 2151.223649][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 2151.229107][ T31] rfkill_fop_open+0x12d/0x820 [ 2151.233915][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 2151.239247][ T31] misc_open+0x2bc/0x330 [ 2151.243547][ T31] chrdev_open+0x4cc/0x5e0 [ 2151.248828][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.253803][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.258879][ T31] do_dentry_open+0xdf3/0x1970 [ 2151.263696][ T31] vfs_open+0x3b/0x340 [ 2151.267785][ T31] ? path_openat+0x2ecd/0x3830 [ 2151.272909][ T31] path_openat+0x2ee5/0x3830 [ 2151.277544][ T31] ? arch_stack_walk+0xfc/0x150 [ 2151.282519][ T31] ? __pfx_path_openat+0x10/0x10 [ 2151.287482][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.293634][ T31] do_filp_open+0x1fa/0x410 [ 2151.298145][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.303056][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2151.308119][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2151.313013][ T31] ? alloc_fd+0x64c/0x6c0 [ 2151.317381][ T31] do_sys_openat2+0x121/0x1c0 [ 2151.322111][ T31] ? __se_sys_futex+0x36f/0x400 [ 2151.326983][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2151.332233][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.337019][ T31] __x64_sys_openat+0x138/0x170 [ 2151.341923][ T31] do_syscall_64+0xfa/0x3b0 [ 2151.346449][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2151.352189][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.358318][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.363068][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.369007][ T31] RIP: 0033:0x7f624018e929 [ 2151.373446][ T31] RSP: 002b:00007f6240ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2151.382204][ T31] RAX: ffffffffffffffda RBX: 00007f62403b5fa0 RCX: 00007f624018e929 [ 2151.390246][ T31] RDX: 0000000000149041 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2151.398241][ T31] RBP: 00007f6240210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2151.406301][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.414314][ T31] R13: 0000000000000000 R14: 00007f62403b5fa0 R15: 00007ffdb8eb8e38 [ 2151.422354][ T31] [ 2151.425402][ T31] INFO: task syz.3.13737:8401 blocked for more than 144 seconds. [ 2151.433268][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2151.440968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.449680][ T31] task:syz.3.13737 state:D stack:28328 pid:8401 tgid:8399 ppid:5898 task_flags:0x400040 flags:0x00004004 [ 2151.461682][ T31] Call Trace: [ 2151.464990][ T31] [ 2151.467923][ T31] __schedule+0x16f5/0x4d00 [ 2151.472489][ T31] ? __kasan_slab_free+0x62/0x70 [ 2151.477446][ T31] ? security_file_open+0xb1/0x270 [ 2151.482627][ T31] ? do_dentry_open+0x35e/0x1970 [ 2151.487587][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.492755][ T31] ? schedule+0x165/0x360 [ 2151.497113][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.502024][ T31] ? schedule+0x91/0x360 [ 2151.506288][ T31] schedule+0x165/0x360 [ 2151.510588][ T31] schedule_preempt_disabled+0x13/0x30 [ 2151.516150][ T31] __mutex_lock+0x724/0xe80 [ 2151.520714][ T31] ? __mutex_lock+0x51b/0xe80 [ 2151.525417][ T31] ? misc_open+0x51/0x330 [ 2151.529814][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2151.534898][ T31] misc_open+0x51/0x330 [ 2151.539119][ T31] chrdev_open+0x4cc/0x5e0 [ 2151.543570][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.548580][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.553539][ T31] do_dentry_open+0xdf3/0x1970 [ 2151.558328][ T31] vfs_open+0x3b/0x340 [ 2151.562457][ T31] ? path_openat+0x2ecd/0x3830 [ 2151.567248][ T31] path_openat+0x2ee5/0x3830 [ 2151.571905][ T31] ? arch_stack_walk+0xfc/0x150 [ 2151.576806][ T31] ? __pfx_path_openat+0x10/0x10 [ 2151.581807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.587919][ T31] do_filp_open+0x1fa/0x410 [ 2151.592503][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.597387][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2151.602780][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2151.607651][ T31] ? alloc_fd+0x64c/0x6c0 [ 2151.612033][ T31] do_sys_openat2+0x121/0x1c0 [ 2151.616729][ T31] ? __se_sys_futex+0x36f/0x400 [ 2151.621662][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2151.626897][ T31] ? rcu_is_watching+0x15/0xb0 [ 2151.631714][ T31] __x64_sys_openat+0x138/0x170 [ 2151.636682][ T31] do_syscall_64+0xfa/0x3b0 [ 2151.641239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2151.646464][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.652603][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.657319][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.663283][ T31] RIP: 0033:0x7f624018e929 [ 2151.667726][ T31] RSP: 002b:00007f6240fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2151.676246][ T31] RAX: ffffffffffffffda RBX: 00007f62403b6080 RCX: 00007f624018e929 [ 2151.684267][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00000000ffffff9c [ 2151.692276][ T31] RBP: 00007f6240210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2151.700327][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.708343][ T31] R13: 0000000000000000 R14: 00007f62403b6080 R15: 00007ffdb8eb8e38 [ 2151.716721][ T31] [ 2151.719809][ T31] INFO: task syz.8.13740:8416 blocked for more than 145 seconds. [ 2151.727545][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2151.735231][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2151.743949][ T31] task:syz.8.13740 state:D stack:28328 pid:8416 tgid:8413 ppid:27812 task_flags:0x400040 flags:0x00004004 [ 2151.755959][ T31] Call Trace: [ 2151.759329][ T31] [ 2151.762373][ T31] __schedule+0x16f5/0x4d00 [ 2151.766892][ T31] ? __kasan_slab_free+0x62/0x70 [ 2151.771929][ T31] ? security_file_open+0xb1/0x270 [ 2151.777336][ T31] ? do_dentry_open+0x35e/0x1970 [ 2151.782337][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.787241][ T31] ? schedule+0x165/0x360 [ 2151.791738][ T31] ? __pfx___schedule+0x10/0x10 [ 2151.796635][ T31] ? schedule+0x91/0x360 [ 2151.800951][ T31] schedule+0x165/0x360 [ 2151.805148][ T31] schedule_preempt_disabled+0x13/0x30 [ 2151.810668][ T31] __mutex_lock+0x724/0xe80 [ 2151.815211][ T31] ? __mutex_lock+0x51b/0xe80 [ 2151.820245][ T31] ? misc_open+0x51/0x330 [ 2151.824599][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2151.830005][ T31] misc_open+0x51/0x330 [ 2151.834191][ T31] chrdev_open+0x4cc/0x5e0 [ 2151.838899][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.843891][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2151.849128][ T31] do_dentry_open+0xdf3/0x1970 [ 2151.853932][ T31] vfs_open+0x3b/0x340 [ 2151.858000][ T31] ? path_openat+0x2ecd/0x3830 [ 2151.863855][ T31] path_openat+0x2ee5/0x3830 [ 2151.868524][ T31] ? arch_stack_walk+0xfc/0x150 [ 2151.873414][ T31] ? __pfx_path_openat+0x10/0x10 [ 2151.878346][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.884494][ T31] do_filp_open+0x1fa/0x410 [ 2151.889098][ T31] ? __lock_acquire+0xab9/0xd20 [ 2151.893979][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2151.899091][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2151.903999][ T31] ? alloc_fd+0x64c/0x6c0 [ 2151.908383][ T31] do_sys_openat2+0x121/0x1c0 [ 2151.913265][ T31] ? __se_sys_futex+0x36f/0x400 [ 2151.918203][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2151.923577][ T31] ? exc_page_fault+0x76/0xf0 [ 2151.928287][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 2151.933842][ T31] __x64_sys_openat+0x138/0x170 [ 2151.938757][ T31] do_syscall_64+0xfa/0x3b0 [ 2151.943275][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2151.948536][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.954618][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2151.959397][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.965325][ T31] RIP: 0033:0x7f8ee5d8e929 [ 2151.969828][ T31] RSP: 002b:00007f8ee6c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2151.978264][ T31] RAX: ffffffffffffffda RBX: 00007f8ee5fb6080 RCX: 00007f8ee5d8e929 [ 2151.986295][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2151.994399][ T31] RBP: 00007f8ee5e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2152.002403][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2152.010474][ T31] R13: 0000000000000000 R14: 00007f8ee5fb6080 R15: 00007fff71f84528 [ 2152.018557][ T31] [ 2152.021626][ T31] INFO: task syz.7.13741:8422 blocked for more than 145 seconds. [ 2152.029397][ T31] Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 [ 2152.037062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2152.046090][ T31] task:syz.7.13741 state:D stack:28120 pid:8422 tgid:8421 ppid:32034 task_flags:0x400040 flags:0x00004004 [ 2152.058068][ T31] Call Trace: [ 2152.061402][ T31] [ 2152.064350][ T31] __schedule+0x16f5/0x4d00 [ 2152.069140][ T31] ? __kasan_slab_free+0x62/0x70 [ 2152.074114][ T31] ? security_file_open+0xb1/0x270 [ 2152.079302][ T31] ? do_dentry_open+0x35e/0x1970 [ 2152.084258][ T31] ? __lock_acquire+0xab9/0xd20 [ 2152.089153][ T31] ? schedule+0x165/0x360 [ 2152.093503][ T31] ? __pfx___schedule+0x10/0x10 [ 2152.098380][ T31] ? schedule+0x91/0x360 [ 2152.102691][ T31] schedule+0x165/0x360 [ 2152.106870][ T31] schedule_preempt_disabled+0x13/0x30 [ 2152.112385][ T31] __mutex_lock+0x724/0xe80 [ 2152.116909][ T31] ? __mutex_lock+0x51b/0xe80 [ 2152.121641][ T31] ? misc_open+0x51/0x330 [ 2152.125996][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2152.131077][ T31] misc_open+0x51/0x330 [ 2152.135265][ T31] chrdev_open+0x4cc/0x5e0 [ 2152.139754][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2152.144755][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2152.150116][ T31] do_dentry_open+0xdf3/0x1970 [ 2152.154970][ T31] vfs_open+0x3b/0x340 [ 2152.159235][ T31] ? path_openat+0x2ecd/0x3830 [ 2152.164011][ T31] path_openat+0x2ee5/0x3830 [ 2152.168643][ T31] ? arch_stack_walk+0xfc/0x150 [ 2152.173531][ T31] ? __pfx_path_openat+0x10/0x10 [ 2152.178623][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.184729][ T31] do_filp_open+0x1fa/0x410 [ 2152.189272][ T31] ? __lock_acquire+0xab9/0xd20 [ 2152.194141][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2152.199241][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2152.204111][ T31] ? alloc_fd+0x64c/0x6c0 [ 2152.208547][ T31] do_sys_openat2+0x121/0x1c0 [ 2152.213248][ T31] ? __se_sys_futex+0x36f/0x400 [ 2152.218131][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2152.223392][ T31] ? exc_page_fault+0x76/0xf0 [ 2152.228110][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 2152.233412][ T31] __x64_sys_openat+0x138/0x170 [ 2152.238306][ T31] do_syscall_64+0xfa/0x3b0 [ 2152.242855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2152.248089][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.254215][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2152.259214][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.265148][ T31] RIP: 0033:0x7f608a38e929 [ 2152.270205][ T31] RSP: 002b:00007f608b25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2152.278892][ T31] RAX: ffffffffffffffda RBX: 00007f608a5b5fa0 RCX: 00007f608a38e929 [ 2152.286894][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2152.295193][ T31] RBP: 00007f608a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2152.303260][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2152.311470][ T31] R13: 0000000000000000 R14: 00007f608a5b5fa0 R15: 00007ffe5c747488 [ 2152.319524][ T31] [ 2152.322581][ T31] [ 2152.322581][ T31] Showing all locks held in the system: [ 2152.330377][ T31] 1 lock held by khungtaskd/31: [ 2152.335258][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2152.345167][ T31] 4 locks held by kworker/0:2/980: [ 2152.350347][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2152.361428][ T31] #1: ffffc90003867bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2152.374030][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 2152.384340][ T31] #3: ffff88807ae43100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 2152.394203][ T31] 2 locks held by getty/5598: [ 2152.400059][ T31] #0: ffff88814c8f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2152.409926][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2152.420107][ T31] 3 locks held by kworker/0:6/28298: [ 2152.425585][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2152.436669][ T31] #1: ffffc90004e8fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2152.450244][ T31] #2: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2152.461652][ T31] 1 lock held by syz.6.13707/8241: [ 2152.466796][ T31] #0: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 2152.477140][ T31] 1 lock held by syz.6.13707/8243: [ 2152.482449][ T31] #0: ffff88807ae43100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 2152.492536][ T31] 2 locks held by syz.3.13737/8400: [ 2152.497741][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.506258][ T31] #1: ffffffff8f9fd5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 2152.516384][ T31] 1 lock held by syz.3.13737/8401: [ 2152.521554][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.530110][ T31] 1 lock held by syz.8.13740/8416: [ 2152.535253][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.543796][ T31] 1 lock held by syz.7.13741/8422: [ 2152.549025][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.557622][ T31] 1 lock held by syz-executor/8437: [ 2152.563010][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.571653][ T31] 1 lock held by syz-executor/8443: [ 2152.576889][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.585508][ T31] 1 lock held by syz-executor/8444: [ 2152.590788][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.599394][ T31] 1 lock held by syz-executor/8445: [ 2152.604604][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.613174][ T31] 1 lock held by syz-executor/8468: [ 2152.618387][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.627075][ T31] 1 lock held by syz-executor/8474: [ 2152.632604][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.641172][ T31] 1 lock held by syz-executor/8476: [ 2152.646366][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.654879][ T31] 1 lock held by syz-executor/8477: [ 2152.660152][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.668688][ T31] 1 lock held by syz-executor/8495: [ 2152.673904][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.682475][ T31] 1 lock held by syz-executor/8504: [ 2152.687694][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.696241][ T31] 1 lock held by syz-executor/8505: [ 2152.701574][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.710219][ T31] 1 lock held by syz-executor/8506: [ 2152.715431][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 2152.723943][ T31] [ 2152.726277][ T31] ============================================= [ 2152.726277][ T31] [ 2152.734757][ T31] NMI backtrace for cpu 1 [ 2152.734771][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 2152.734793][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2152.734804][ T31] Call Trace: [ 2152.734813][ T31] [ 2152.734821][ T31] dump_stack_lvl+0x189/0x250 [ 2152.734845][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2152.734874][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.734896][ T31] ? __pfx__printk+0x10/0x10 [ 2152.734930][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2152.734959][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2152.734982][ T31] ? _printk+0xcf/0x120 [ 2152.735007][ T31] ? __pfx__printk+0x10/0x10 [ 2152.735031][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2152.735070][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2152.735099][ T31] watchdog+0xfee/0x1030 [ 2152.735120][ T31] ? watchdog+0x1de/0x1030 [ 2152.735146][ T31] kthread+0x70e/0x8a0 [ 2152.735175][ T31] ? __pfx_watchdog+0x10/0x10 [ 2152.735192][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.735220][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2152.735247][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2152.735274][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.735301][ T31] ret_from_fork+0x3f9/0x770 [ 2152.735324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2152.735349][ T31] ? __switch_to_asm+0x39/0x70 [ 2152.735373][ T31] ? __switch_to_asm+0x33/0x70 [ 2152.735395][ T31] ? __pfx_kthread+0x10/0x10 [ 2152.735422][ T31] ret_from_fork_asm+0x1a/0x30 [ 2152.735461][ T31] [ 2152.735469][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2152.892725][ C0] NMI backtrace for cpu 0 [ 2152.892741][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 2152.892760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2152.892771][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2152.892818][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 09 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2152.892831][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 2152.892862][ C0] RAX: a3f2c41fbc055400 RBX: ffffffff81979d58 RCX: a3f2c41fbc055400 [ 2152.892874][ C0] RDX: 0000000000000001 RSI: ffffffff8da4c121 RDI: ffffffff8be41880 [ 2152.892886][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 2152.892898][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fc232f0 [ 2152.892910][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a50 [ 2152.892921][ C0] FS: 0000000000000000(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 2152.892934][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2152.892945][ C0] CR2: 000055eec91fb000 CR3: 000000000e138000 CR4: 00000000003526f0 [ 2152.892959][ C0] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 2152.892970][ C0] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2152.892980][ C0] Call Trace: [ 2152.892986][ C0] [ 2152.892992][ C0] default_idle+0x13/0x20 [ 2152.893009][ C0] default_idle_call+0x74/0xb0 [ 2152.893027][ C0] do_idle+0x1e8/0x510 [ 2152.893045][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2152.893071][ C0] ? __pfx_do_idle+0x10/0x10 [ 2152.893092][ C0] ? do_idle+0x10/0x510 [ 2152.893112][ C0] cpu_startup_entry+0x44/0x60 [ 2152.893129][ C0] rest_init+0x2de/0x300 [ 2152.893147][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2152.893172][ C0] start_kernel+0x47d/0x500 [ 2152.893191][ C0] x86_64_start_reservations+0x24/0x30 [ 2152.893213][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2152.893235][ C0] common_startup_64+0x13e/0x147 [ 2152.893264][ C0] [ 2152.893749][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2153.107822][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 2153.120718][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2153.130802][ T31] Call Trace: [ 2153.134137][ T31] [ 2153.137076][ T31] dump_stack_lvl+0x99/0x250 [ 2153.141682][ T31] ? __asan_memcpy+0x40/0x70 [ 2153.146308][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2153.151533][ T31] ? __pfx__printk+0x10/0x10 [ 2153.156144][ T31] panic+0x2db/0x790 [ 2153.160060][ T31] ? __pfx_panic+0x10/0x10 [ 2153.164487][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2153.170303][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2153.175722][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2153.181909][ T31] watchdog+0x102d/0x1030 [ 2153.186252][ T31] ? watchdog+0x1de/0x1030 [ 2153.190675][ T31] kthread+0x70e/0x8a0 [ 2153.194749][ T31] ? __pfx_watchdog+0x10/0x10 [ 2153.199422][ T31] ? __pfx_kthread+0x10/0x10 [ 2153.204022][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2153.209234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2153.214449][ T31] ? __pfx_kthread+0x10/0x10 [ 2153.219054][ T31] ret_from_fork+0x3f9/0x770 [ 2153.223675][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2153.228900][ T31] ? __switch_to_asm+0x39/0x70 [ 2153.233683][ T31] ? __switch_to_asm+0x33/0x70 [ 2153.238458][ T31] ? __pfx_kthread+0x10/0x10 [ 2153.243060][ T31] ret_from_fork_asm+0x1a/0x30 [ 2153.248283][ T31] [ 2153.251650][ T31] Kernel Offset: disabled [ 2153.255995][ T31] Rebooting in 86400 seconds..