last executing test programs: 14m10.801606791s ago: executing program 32 (id=855): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x8f1, 0x2a}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r1, 0x40101286, 0x0) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x1, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r2, 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x5, 0xffffffffffffffff}) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) (async) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 12m17.338866251s ago: executing program 3 (id=2008): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000180)={0x0, 0x10}) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) mmap(&(0x7f00005c5000/0x2000)=nil, 0x2000, 0x1, 0x110, r3, 0x7c454000) read$FUSE(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f00000001c0)={0x25d1, 0x31384142, 0x0, 0x6, 0x2, @stepwise={{0x4, 0x10001}, {0x2}, {0x4, 0x5b591565}}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 12m16.474441921s ago: executing program 3 (id=2014): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0xfffffffe}, {0x1}, {}, {0x4}, {0x6, 0x9}]}) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) 12m15.097690851s ago: executing program 3 (id=2029): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3, 0x0, 0x0, 0x2}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}}) openat(r2, 0x0, 0x389b00, 0x41) 12m14.782163023s ago: executing program 3 (id=2033): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x541db000) openat(r1, 0x0, 0x80402, 0x41) 12m14.274323685s ago: executing program 3 (id=2038): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x200) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, &(0x7f0000000280)={0x10001, "6525c478f5d8ab7c8d9388686ecd72279991f78d01b41ae369a2a35df6d03822", 0x1, 0x1}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffc, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x400, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a137f0373572a96ca0193b3a8382d3e951948555000000000400000000000000000000000011a9ba2cda756ad1366000", "24431a1e77a68e174ff4ffffffffffffff10e200000000000200", [0x5, 0x4]}}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000380)={r4, 0x401, 0xda, 0x9, 0x1, [0x0, 0x0, 0x0, 0x0], [0x3, 0x9, 0x4, 0xf746], [0x8, 0x928b, 0x0, 0x8], [0x4, 0x9, 0x1000, 0x9]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000580)={r4, 0x67, 0x53, 0x5, 0x1, [0x0, 0x0], [0x3683, 0x0, 0x6, 0x8], [0x9, 0x3, 0x1, 0x8], [0x40, 0x2, 0xe, 0xffff]}) r12 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r12, 0xc06864ce, &(0x7f0000000440)={r14, 0x0, 0x1000, 0x0, 0x2, [0x0], [0x0, 0x0, 0xc], [0x10007e], [0x0, 0x3]}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000000)={r15}) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000600)={r4, 0xa, 0x687, 0x7ff, 0x2, [r10, 0x0, r11, r15], [0x4, 0x9, 0x81, 0x401], [0xfff, 0x101, 0xb81, 0x8001], [0x5a0000, 0x2, 0x610ffffb, 0x7]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000006c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, r3, r4, 0x1, 0x401, 0xd, 0xfffff5d5, 0x2, 0x7, 0x8, 0x6, 0x7}) r16 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r16, 0x8038550a, &(0x7f0000000400)=@urb_type_control={0x2, {0x0, 0x1}, 0x901, 0x4, &(0x7f0000000300)={0x44, 0x17, 0x1, 0xfff8, 0x2}, 0x8, 0x7d6, 0x4, 0x0, 0x6, 0x6d9f, &(0x7f0000000680)="32eafaaa8f9d4a257a"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 12m14.181845697s ago: executing program 3 (id=2041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0xc, 0x2, 0x6, 0x7, 0x10, 0x4, 0x40, 0xff, 0x4, 0x4, 0x9, 0xcb, 0x1000}, {0x4, 0x6, 0x3, 0x4, 0xa, 0x17, 0x7, 0x2, 0x2c, 0x3, 0xd3, 0x0, 0x2}, {0x2, 0xb157, 0x1, 0x5, 0x6, 0x6, 0x4, 0x0, 0xf9, 0x7, 0x5, 0x9, 0x2}], 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000001c0)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187014, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x3011}}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f00005ae000/0x3000)=nil, 0x3000, 0x2000004, 0x31133, r6, 0xb90d8000) openat(r10, 0x0, 0x80402, 0x41) 11m59.026758538s ago: executing program 33 (id=2041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0xc, 0x2, 0x6, 0x7, 0x10, 0x4, 0x40, 0xff, 0x4, 0x4, 0x9, 0xcb, 0x1000}, {0x4, 0x6, 0x3, 0x4, 0xa, 0x17, 0x7, 0x2, 0x2c, 0x3, 0xd3, 0x0, 0x2}, {0x2, 0xb157, 0x1, 0x5, 0x6, 0x6, 0x4, 0x0, 0xf9, 0x7, 0x5, 0x9, 0x2}], 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f00000001c0)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187014, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x3011}}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f00005ae000/0x3000)=nil, 0x3000, 0x2000004, 0x31133, r6, 0xb90d8000) openat(r10, 0x0, 0x80402, 0x41) 8m30.18627744s ago: executing program 5 (id=3491): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="008d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m29.322185066s ago: executing program 5 (id=3498): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af12, &(0x7f0000000080)) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='permprofile &'], 0xff) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) read$FUSE(r2, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000180)={0x0, 0x0, 0xfffffff8}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) (async) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000002c0)={0x6, 0x5}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0xefffd000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000002400)={{0x9, 0x3}, {0x9a, 0x9}, 0x2, 0x1, 0x16}) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, r5, {{0x1, 0x3, 0x9, 0x22, 0xffff6718, 0x9, {0x5, 0xa13, 0x8, 0xfffffffffffffff7, 0x2, 0x3, 0x80000001, 0x7, 0xc55, 0xc000, 0x1ff, 0x0, r8, 0x0, 0x9}}, {0x0, 0x7}}}, 0xa0) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000040)=0x2000) (async) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f0000000200)={0x1, 0x100}) (async) read$FUSE(r2, 0x0, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r12 = dup(r11) (async) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r12, 0x0) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m29.239785138s ago: executing program 5 (id=3499): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r1, 0x0, 0x4, 0xd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x500000000000000, 0xf}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{}, {0xff, 0x0, 0x10}, {}, {}, {0x0, 0xdc}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x40}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9}, {}, {0x0, 0x1}, {}, {0x20}, {0x3}, {0x4, 0x4}]}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f00000000c0)={0x8, r1}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r6, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003fc0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x80002, 0x0) write$FUSE_IOCTL(r7, 0x0, 0xfffffffffffffe52) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000340)={0x3, 0x7fff, 0x1dc, 0x80400}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000300)={0xc}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x4, 0x50, r8, 0x83000000) ioctl$MEDIA_REQUEST_IOC_REINIT(r13, 0x7c81, 0x0) 8m28.15447651s ago: executing program 5 (id=3511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000cc0), 0xa, 0x2) close(r2) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x8000, 0x1007) 8m28.056385037s ago: executing program 5 (id=3513): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000080)={0x3, 0x5a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x400000, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xffffffffffffffda, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) read$FUSE(r4, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m26.814330066s ago: executing program 5 (id=3521): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) read(r1, &(0x7f00000010c0)=""/180, 0xb4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x140002, 0x0) syz_open_dev$dri(&(0x7f0000001180), 0x45, 0x1) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000200)=0x1) r7 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) read$snddsp(r3, &(0x7f00000011c0)=""/95, 0x5f) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000003280)={0xf, 0x5, 0x0, 'queue0\x00', 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat(r3, 0x0, 0xe4440, 0x0) 8m11.755556136s ago: executing program 34 (id=3521): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) read(r1, &(0x7f00000010c0)=""/180, 0xb4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) read$FUSE(r1, &(0x7f0000001240)={0x2020}, 0x2020) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x140002, 0x0) syz_open_dev$dri(&(0x7f0000001180), 0x45, 0x1) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000200)=0x1) r7 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) read$snddsp(r3, &(0x7f00000011c0)=""/95, 0x5f) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000003280)={0xf, 0x5, 0x0, 'queue0\x00', 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r10, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) openat(r3, 0x0, 0xe4440, 0x0) 5m49.349750196s ago: executing program 2 (id=4554): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x6, 0x5, 0x0, 0x0, 0x1a4c4c7b, 0x2, 0x3, 0x7, 0x60c9, 0x0, 0x10, 0x8, 0xff6, 0x8000, 0x5, 0x29, {0x9, 0x81}, 0x4, 0x9}}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x12) write$dsp(r2, &(0x7f0000000240)="9bfb", 0x2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r3, 0x7dfff000) 5m49.058391181s ago: executing program 2 (id=4555): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x53, 0x71a5, 0xa, {0x8, 0x7}, {0x7, 0x8}, @rumble={0x100}}) 5m48.926311081s ago: executing program 2 (id=4557): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = dup(0xffffffffffffffff) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="506c66b5e775fc8e62", 0x9}, {&(0x7f0000000200)="a3d1d8", 0x3}, {&(0x7f00000002c0)="aaffa6", 0x3}], 0x3, 0xfffffc01, 0x5, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000080)={0x8, r3}) (async) splice(r5, 0xfffffffffffffffe, r5, &(0x7f0000000300)=0x1, 0x9, 0x8) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0) (async) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x541b, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000b40)={0x0, @reserved}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x82bf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x202}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 5m43.16818068s ago: executing program 2 (id=4590): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat(r1, 0x0, 0x80402, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000091040000000000000000c97600000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x3, 0xeeee0000, 0x2000, &(0x7f00006ab000/0x2000)=nil}) 5m42.864856876s ago: executing program 2 (id=4592): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000001080)=ANY=[@ANYBLOB="1e0396ca3c5c980128876360864668f82ffdd569d2f530b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad80806"], 0xffdd) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1268, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r4 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f0000000c00)=[{}, {0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000e80)={{r5}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x460f, 0x0) openat(r2, 0x0, 0x80402, 0x41) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r2, 0x5d134000) 5m42.335633201s ago: executing program 2 (id=4594): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x6, 0x0, &(0x7f0000000080)=[{0x4, 0x2}, {0x9}, {0xffffffffffffa5ac, 0x8}, {0x156d, 0x2}, {0x0, 0x240000000000}, {0x7f, 0x800}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000001180)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x8df3, 0x1, 0x7, 0x1000}}, 0x120) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001340)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000012c0)=""/80, 0x50, 0x1, 0x348, 0x6, 0x0, 0x8}}, 0x120) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000014c0)={0x3, 0x100, 0x7, 0x9, 0x7fffffff, 0x683cb9a3}) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000001500)={0xe, {0x6, 0x9, 0x3, 0x48, "1583e8bb2b9ccd13082a2c1a2f949e69daeb4242c2a6b6f1422c66d2dd43f79104042d145d096148736db1488e8afd3a8d1979a03cde4f7aba45af6a6421e3340cf9d0abdf566c64"}}, 0x54) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000015c0)={0x8, &(0x7f0000001580)=[{0x6, 0x6}, {0xfff, 0x2}, {0xffff, 0x5}, {0x6, 0x100}, {0x4, 0x12}, {0xdb1, 0x40}, {0x5, 0x7f}, {0x2, 0x2}]}) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000001600)={0x2, 0x200, 0x10001, 0x96, 0x1, 0x5}) write$UHID_CREATE2(r3, &(0x7f0000001640)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x7b, 0xf87e, 0x6, 0x5, 0x6, 0x80000000, "0c348bd19a55286d1df295eec546af7b9c7d5dd57ba4e9960f239c4df40892f09112c7ffd7817f98db8481f70e7e2514af6ab67149a3161163c7187d60747eed89c226ffbdaf994bf5d15489745befcc7f0eb873eed2b681805ea90d8a1751b855a9e4699afa017e72246aeb468010676c27963f1573370d979fcb"}}, 0x193) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000001800)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001840)={{0x0, 0x1, 0x1fc4, 0x9, 0xd81, 0xffffffffffffffff, 0x20000000, 0x2, 0x6b2d, 0xfffffffd, 0xfff, 0x4, 0x1, 0x4, 0x401}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001900)={r4, 0x2d7c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000002900)={0x8, r1}) close(r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f00000029c0)={0x48, 0x4, 0x0, 0x0, 0x29, &(0x7f0000002980)="c5273de6f325af26606497038e2eb98c37dfe997696508b7945800664796e3a6ef588ea3b4f080ba1c", 0x9}) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x4de) r6 = syz_open_dev$evdev(&(0x7f0000002a40), 0x9, 0x1) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000002ac0)={0x56, 0x3, 0x8, {0x2, 0x100}, {0x8, 0x1}, @period={0x5a, 0xd, 0x9, 0x40, 0xb, {0x0, 0x10, 0x4}, 0x9, &(0x7f0000002a80)=[0xe, 0xd2, 0xa, 0x10, 0x4, 0x9, 0x6, 0x4, 0x6]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000002b00)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000002bc0)={0x28, 0x0, r8, 0x28, &(0x7f0000002b80)=""/40}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002c00)='./binderfs/binder0\x00', 0x804, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000002c40)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000002cc0)={0x9, &(0x7f0000002c80)=[{0x1, 0x40}, {0xc, 0x519}, {0xf801, 0x3}, {0x1, 0x8000}, {}, {0x194, 0x3}, {0x80, 0x6}, {0x6, 0x101}, {0x2}]}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000002dc0)={0x30, r7, 0x0, 0x0, 0x1, 0x6, 0x6, &(0x7f0000002d00)=""/134}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000002e00)) 5m27.208170013s ago: executing program 35 (id=4594): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x6, 0x0, &(0x7f0000000080)=[{0x4, 0x2}, {0x9}, {0xffffffffffffa5ac, 0x8}, {0x156d, 0x2}, {0x0, 0x240000000000}, {0x7f, 0x800}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000001180)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x8df3, 0x1, 0x7, 0x1000}}, 0x120) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001340)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000012c0)=""/80, 0x50, 0x1, 0x348, 0x6, 0x0, 0x8}}, 0x120) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000014c0)={0x3, 0x100, 0x7, 0x9, 0x7fffffff, 0x683cb9a3}) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000001500)={0xe, {0x6, 0x9, 0x3, 0x48, "1583e8bb2b9ccd13082a2c1a2f949e69daeb4242c2a6b6f1422c66d2dd43f79104042d145d096148736db1488e8afd3a8d1979a03cde4f7aba45af6a6421e3340cf9d0abdf566c64"}}, 0x54) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000015c0)={0x8, &(0x7f0000001580)=[{0x6, 0x6}, {0xfff, 0x2}, {0xffff, 0x5}, {0x6, 0x100}, {0x4, 0x12}, {0xdb1, 0x40}, {0x5, 0x7f}, {0x2, 0x2}]}) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000001600)={0x2, 0x200, 0x10001, 0x96, 0x1, 0x5}) write$UHID_CREATE2(r3, &(0x7f0000001640)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x7b, 0xf87e, 0x6, 0x5, 0x6, 0x80000000, "0c348bd19a55286d1df295eec546af7b9c7d5dd57ba4e9960f239c4df40892f09112c7ffd7817f98db8481f70e7e2514af6ab67149a3161163c7187d60747eed89c226ffbdaf994bf5d15489745befcc7f0eb873eed2b681805ea90d8a1751b855a9e4699afa017e72246aeb468010676c27963f1573370d979fcb"}}, 0x193) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000001800)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001840)={{0x0, 0x1, 0x1fc4, 0x9, 0xd81, 0xffffffffffffffff, 0x20000000, 0x2, 0x6b2d, 0xfffffffd, 0xfff, 0x4, 0x1, 0x4, 0x401}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001900)={r4, 0x2d7c}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000002900)={0x8, r1}) close(r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f00000029c0)={0x48, 0x4, 0x0, 0x0, 0x29, &(0x7f0000002980)="c5273de6f325af26606497038e2eb98c37dfe997696508b7945800664796e3a6ef588ea3b4f080ba1c", 0x9}) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x4de) r6 = syz_open_dev$evdev(&(0x7f0000002a40), 0x9, 0x1) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000002ac0)={0x56, 0x3, 0x8, {0x2, 0x100}, {0x8, 0x1}, @period={0x5a, 0xd, 0x9, 0x40, 0xb, {0x0, 0x10, 0x4}, 0x9, &(0x7f0000002a80)=[0xe, 0xd2, 0xa, 0x10, 0x4, 0x9, 0x6, 0x4, 0x6]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000002b00)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000002bc0)={0x28, 0x0, r8, 0x28, &(0x7f0000002b80)=""/40}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002c00)='./binderfs/binder0\x00', 0x804, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000002c40)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000002cc0)={0x9, &(0x7f0000002c80)=[{0x1, 0x40}, {0xc, 0x519}, {0xf801, 0x3}, {0x1, 0x8000}, {}, {0x194, 0x3}, {0x80, 0x6}, {0x6, 0x101}, {0x2}]}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000002dc0)={0x30, r7, 0x0, 0x0, 0x1, 0x6, 0x6, &(0x7f0000002d00)=""/134}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000002e00)) 5m25.646478574s ago: executing program 4 (id=4667): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"940de312c9be185c33394390ce360adcb8443d1ca2464ad29fe46c8717a823e29b12011e867516a9c1b63394e6b4922549ac2f98b0bafc013757371b5762e5b03b4c8cfcc5d34368b21917740955f80e80fa98a68cb052b102c03e72a4c6702778dfcc5bb74ce23d914f8b143bd94d7382a385be93f61eef509d6cbffa81afee0e3524b8b768a0ef0ae00ad2a23728722436d1c150b512b6c642cb2eeaecb085719014332015474a4ddf7098bb5ac398c0ce256e4dcfd4613dbe9a34b96439546a28db9ce97b344b6c97288b3854e127b4f533f56439a74fcffc41dfeffc5d7a99c01a0fedfd937af595c05a942216581f8efd1ffa1c23c6f08d6987be16bb52420c80bda5da46987fbf7209487defe0374226a526d3588660192d921bfe407f1d1833f390dd8b41b30c53b4deba5a086c516d9bc8ca572d8f0f875303c85bd16570e89f74d7c4ef547a07dd62f334fee76e2e0ca31cca1ad0528d7448ceecd4c9785c302a40bc114335dea8775958a3beff8eeb31afcb9a2c7561980f8554220769e5e90fdfb2f5a905518ef1667a91e2dd474383e4312ea219fe65d421006734fe04661f75e69ae825120b33fb74293e3b83e7f7f563b475cd6e08fd6878ee424fa141d3aee86d952c212c2e7730796510a463a8da486852b23a1d62b714a11301499029d9efb715a11b64f24cd2660c9a47573ce4dd042e333e433ee28b2bce545cf067040193057de290965c1d547fed137e5eb22f5c0a06ad4de6b78204bf053f37c5d96b8053ea445b640360da8fce3391514dc3d1f4e4b35047138cd8c2717bcba278a4f8c27bac01b469ee3fd04004f58287a18307b0ad4120f2c26b08c3267249bfbe1064a3f171e0cfe595f7ab146f3148c73228edf694dc0c400c36e3493b1aca5f85972dadb8d02bddb607b7a431750ca4863812b8020000000000000042db2971e280541cbfa446c6c6d85b77e3327a2d327c25b7619647374e76b1be266cb68959d2651d0c7438cb1b53982191858c66500d8536013701194a9f02dd77216f932e07a4c4b4558b2a38d7e5c39a453c8fb5fae0d00550a2d143f721cd676d842f2ae39ecbf99e027b4cf9f3c2a9bf3b663e51a0b29cf4cfb0877d5b89fdfa93fd9bf33392e6a2c8df36f9f2faa3716d293b7d94c93458c17df99aaadd218fe4c7b967b43f48725e6bac67bf9176e8c63f94862b036b1870bc314b51fea9d0c92020427abaf5be10d3faad2f684d46a2461f2a92350d6f204f03ad2a9fa54cbd8a7a3e7ba2d54f3615ac5ea47f120572f8ef941e81b0812bfc4227ef5719093afbf90040ef1a5eda64563eb7fd015ea54342340ec8648d911a8f3f358ca124ef8c70685bce2fbaeeebf54d059cefd53751b5cf33fe2d92c9df6a63821b6db5188210565e132768b192fb27e745605c529e3648060a98d656f35e36dc4be3102bd678db0ceb0301c5cb0f7f7a08c55cd038a5f751a7c96116f0bd9c9a349558a7a8fc6a73cce1132549169822bf32d742fc4f4e2e50f59eb669f2384282247c60253edc98f9bc802a288a94e1011a066ce9f6eca5f87d2afd893900c3aff87be959451269bc9ac735c43c1e5ecf5d5bff262a27f0c8a1ad401492ffec662e27b12399096fee9910d0fadfd1e1bcf1f20f8f7e5ff1cce9e8db0fd71dda6f228aa96bba6b4120361a6f6acc832be5daa1aabd03a9ae810f0d21466c1a652a47c11db6a8e52580a8347326113b54a4beeaeb21b45e5ef0aa3cfbfb22d99640b7b935bce8e37cebce586f7fe72208b491795a9fbb220ec9b98dd7811ced86292189ce351e8a64c6afde9c1dccbaaebf7e5e3d5e529e926e814b381342c13ea0757ce52a0b0a155d1c85c4108deffa719a22bef7b681a17504e22d6fe9197699e0a16a7104f412e3a681c8ee41d8fbddc8610c161f1fad9e4a5e526e20ac61496e9f3596cc94b79e9680a64a832dc26d6e33e127abe5c405b16978bc4297a85ccaf1599b195db9d66b698c770d84fa90d89b51eca02ed3a3465b8eca9589af034bd6b9c8f6329e393e4753887696ae5158e8ca3ef2e66fac38a6d6a1b61e81d5b6a3c1cb007d64a33f1fe01cf39b82b270e9083ce13b1a32f0c98376d43cdbf9f17b74655f3000343fe051a75ac658a84629b1245107652d6dfa54b1a7d77922becb74539ffb11292794f12ebfd3ea8888c7cd10692d52c85340f92c5d01464fe36deaaec6ad6cc22870372d61485e2d76accd9bf93e0842efe5652e73100a6727b3a4ce4d1594c8ddb5742897d05fd6f6333fa1b90afeaab9fc7426251d24deeef43784f12c0bb09f102962ee9ab427a53fd8da8e1e3c8000ac7164e61d6258c515dcdd911fb1a519d7b38e556457da330ceda8e948aeaf7421d37faf50071f0d38c08fc938278f247084195e778ac90ab7bfafb59c2a1c643cd18d883a46a6cc41410f505ba209746d6b12c015eddf31b6c9ebf2f04605518033721cdf02b1da210ca1465129b443c0c46247b5f8cceb000af2c551fcea1c1bef29c5859e95bcf0956b9092279b47dc652134d2bc54c3688978fd4d7c203749da5e4824fe314aa57e76f58fadfafcc7660b68b1a6043acf8f9f0c259d16fe236b5906f88816e7ab69b67f762ad79a5f654c507cc49be181525ff05cde4d56b53790151efa8060c4685e2b1dd0ad89551a41e0d3dda33c2b528922849a8dfcd7246c242c3b2aa38a69e3e5a37c5806c4bcff53e08ffc7a830d925e3394b688ffffffffcbfe387c9e7df19cfb2b54303c101557aa2ed080194fe0af76d672ed77dfa4c5c0c0f9693f4e8c446d3bc19c0a8654bb4ba8b4daae69edf414615473ec2aadaa6871b7d08a51e349acc7b16fddf741f71670da4c2b0eadcf19f46f0fd18b59ecf7b943a2a5c90125638a3b3270a366c074868e62fe2e8751ff3e60411d7e1b3fb6a873f7843489f661f1bc401765cdfacbd76e1b52e15fb10fc19dc4803d3a4743ab977fae35eed00d59ddf64fcbc61f5fa0cf4098d0babde4a397d2ef100c23ca9f836656d5f25b018606e148e3f66400a682472ed5d28b7de624ed838277432623c11027da18378e46c3fd340585b4835ab1d771266322eee56c3e6bf3300f5d48b6b01f515ba7f3fb726cfc6fdf6c07a2f46bbc3f36fc9ba6e551a46335337c881cc4b73e79e76638411adcaa81ee3b6d0e6e6c721da36dcab68bfb0ca6ba7b2c267b80120143a5c4be333b2cf85b3bd2425ca691ff367d130dbbd8e5f6a819e093eae9d176c1c3fb61557f9e5080ee7703fe2ca1061b52d0a40d7ee2f408b3ceac303e302d96d929c17026793c66423d748a81adfd7cb29027f327b0dac4055e88e385f0400f97988aa1fa40cdf776f9f07991fb55d9d4bf62ebefced240d821bd4fbba62c1b62320228c6a4ca613878e3eb538eea28e92b5d909fc7e63ed5a544e7698d0b7d3d99415d4028a5da4cc67fcba3b744acd4f92938027f42b785405228a38d85fd678703b9d41a6a54cd48303a6be64408101fc5471641c1c5a747244da684fef97aa48bf1a225007f26d9f4002a0dc14d01191ef1d749ea2ea05c42c173c3244c1039c04341b0cf37574d8b78e357b451bfcfb79762ed6a4fbc689690bf37afaa92702a0349ed9aecd9111df9fd57b97749bbf5003991029344497c9ff85adaa7a2e566647ba5bad341eed62034b581981dd7c9de9fd4c241a54ad4d6e9e1cf7ca984b13c628cc65eca0829e69d4d390581e43cd2ed5c56608b45c109f35350fb875316e71f79c433319462d4b589a1f7f2d14d43092655da23d63c63298ed62dd481ab0bc58e97f397b39c94b32fad6a1e0cd9da2dfbe6897ee4986fdbafdb0e4b575f800df5da43cf318ea7a5e83a0136b3bde3296b2bd230ed212f79500c6a4458522c3881532b7bfd170647ee65931760f35a1c1f95b8c93e4233f0de2a13c83f31522f2bee05a57c8378ac6bdd3c9e30dc188b30dadb936f35a3fa247732ebae6a8d762992f8a96c1d26981bda157f2b676ac9d61bb786ac8c349da94dbf75a21b786cdceb47a92597b6d2b22f7dc1187cdb4681ce9bebd69977bab9eabf2a68c1d3b3463d6c7f1392e12a17deb97f2ce5c9ef4021d3b4e0df6b3f4b693e136e3931837e91617cd85846f3019a74d2d65f36369e73a461753631d72f9e2834c446ae7e173d6b1935adc0ce65eb0eac830d442a0344f2cbaedf8d48cb0a6959d07f208fbb2dae434f4fdf35b265fbdbde4138b455b7941096d55808de601ddd8a41a70b12968862d0b4086d4ff55152aee65eaa761a9588bb25bce193b4e55ebb183807f118bff0ccbd85ea761e7c3b6cccb64f97b3f1bf7a96eecc7ab40e770a1620209b509f23aab0f769a16c9b8092326987f0cd1de94b911ea6bef5cf15a93829b7cbf03aa85ef577633e058f81e9653fc47d15ab8bead567ed2affbbf5a470302c065086324dc304c777228050ea9f717e45b6676fc9002ccd0428fcb27d839e4139fb17d4ee72e2fe8394e5de0cc814d92663f8c5f87e131a34ef7094078be0cf54763c82004af9727c7972ff1ea6162b279beea87bc2741e996d14f549d0474aabe780c5b80a35eed311cb734c23d01c160e439662c813126747c7d09068e32fa72605d71abc2a332cb59d81071818d5e0944194285f4cfc050392e505dd93c8c882f46fb6b70b4660784d543a6bf34653487840fdc298c8280241174805bf3cf38083224d213cd6076beac135ed3f8c4c6d808c45da2a47750cb0f4d2be6beada1c481a0152d80c0b520d2f090455494c83ba78eb91e6558d52ceceb23c956bb382bb280e6382d2cb679eecd2bcfb6107e2e4f568f1be293eaa0d2ebb77169b103d5fe74d745cf082c36022108b4c430a87fa8535f1c56d0c1d5dae50c549b1b08911e2d2619eef61131c7804b35c3ca4dac1f2595c68941b013b5ded8bfd52ed41da13c0886b7f9c61a5244a815711253aad7ea74eae788b1beea9bc15addb199d2fc79e81a34b887a0e4b935ad154e961c8b6972f124cae7742e82db1e714af15f34908960dbb4ea24e44ffd750c9d11dd45bfaae73028bc88fddf74b2d24de205980ba14f4889119f8a6291b3724497503ddf95222d5d050414e487a3dc65e5eda3169e10570a50440be346cc1f1b0c848410b46610c738636707c5d740a8e3a9b688c2c1ea54135bffd2ffd87d9dfa902f3dd97b2a6068fa65f5a5f95da2b9f6124fe07682e27ab65ab96573e762f5060439e18649798e0b9d7864f91dbc4f4ed3a4ab30671f8f7f3c49c7ac504a754f9420fd9b22421afd7203f7cd6dd8c8e7a33709e12d004e402672af2b3f9046bc57854f98482538ad48723cd153cf03103c157cdb1a63e839a02c3f0041d7020280f96f3f7e0ce89c408be10d344540808dee1bfcb01f5293ab606c71ffc09f9e63b93b37e8d8007ad8432d2e81c3d1d40a57711bdb798ee91a3f05f93f4f46f883db0613bf95fabd523d955d0d4a5518e1bb3dae7646af8af8d4a4d7dcfac633c6efa3164f9e05bbb4b05947ac0e6c4edd99a768eda4c7149cf38a460b522d6405aa47fada1c78f56fbd33669719b1496427f290532334b69d0a7cf6c46cefe5ecd0fd923b14929fd3db8a1a94ba63954b58ceb9b1e0f8471a02c13a160aa763083a5fd36c199075a769768e164f17911f5a416bb96198aa0954a7d27e30c480691ce80dc71a49100", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) 5m25.121403028s ago: executing program 4 (id=4670): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) read$FUSE(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 5m23.440636007s ago: executing program 4 (id=4674): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x10001, 0x0, 0x7a6e, 0x4, 0xf, 0x0, 0x8, 0x9, 0x7, 0x2, 0x40000000], 0x2000, 0x8340}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0x4008af20, &(0x7f0000000a40)={0x0, 0x1, 0x0, [0xff, 0x7, 0x68d, 0x3, 0x401], [0x71bf62aa, 0x1, 0xffffffff, 0x5, 0x81, 0x81, 0x7, 0x8, 0xf841, 0x5, 0x101, 0x8, 0x7, 0x7, 0x9, 0x7, 0x100000001, 0x80000000000, 0x6, 0x9, 0x2, 0xba, 0x3, 0x7, 0x6, 0x3, 0x7f, 0x8001, 0xfffffffffffffff8, 0x4, 0x4, 0x1d, 0x10000, 0x2, 0x0, 0x5, 0x2f8, 0x3, 0x100, 0xf9, 0xfff, 0x5, 0x9, 0x1, 0x100000000, 0xb, 0x100000001, 0x7, 0x40, 0x10, 0x6b0, 0xee0f, 0x1, 0xc3, 0x9de, 0x0, 0x7b2, 0x18000, 0x8, 0x6, 0xd, 0x8fe, 0x0, 0x100000000, 0x0, 0x7, 0x4, 0x1, 0x5, 0x5, 0xa9a, 0xffff, 0x80, 0xfffffffffffffab4, 0x3, 0x4, 0x7, 0x4, 0x974b, 0x6, 0xff, 0xfffffffffffffff8, 0x36, 0xed6, 0x9, 0x9, 0x2b2c891e, 0x9, 0xffff, 0x3ff, 0x1ff, 0x0, 0x2, 0xee, 0x5cd, 0x4, 0x80, 0xfffffffffffff000, 0x0, 0x1, 0xffffffffffff7fff, 0x6, 0x0, 0x8, 0x4, 0x4, 0xeb51, 0xcdf, 0x6, 0x5, 0x5, 0x7, 0x2, 0x3, 0x5400000000000000, 0x1800000000, 0x7fffffff, 0x6, 0xfff, 0x8, 0x6]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 5m22.974437725s ago: executing program 4 (id=4677): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc0305615, &(0x7f0000000040)={0x0, 0x0, @value}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000001400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 5m22.225678285s ago: executing program 0 (id=4680): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x20000) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0xa, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, r5, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f00000001c0)={0x1, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) write$FUSE_DIRENT(r8, &(0x7f0000000480)={0x140, 0x0, r4, [{0x5, 0x48, 0x2, 0xfffffffc, '$*'}, {0x4, 0xfffffffffffffffd, 0xc, 0x6, '/dev/nullb0\x00'}, {0x3, 0x2, 0x1, 0x5e8a, '{'}, {0x4, 0x8, 0x10, 0x2, '/dev/input/mice\x00'}, {0x0, 0x3, 0x4, 0xe, '}[)('}, {0x4, 0x8000, 0x9, 0x1ff, '{\\{/#[\'}^'}, {0x6, 0x6, 0xd, 0xf, '/dev/rnullb0\x00'}, {0x0, 0x0, 0x15, 0x8c49, '/proc/self/net/pfkey\x00'}]}, 0x140) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 5m21.102444181s ago: executing program 0 (id=4682): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x10}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x800, @local}, {0x2, 0x9d, 0x4, @loopback}, r1}}, 0x48) 5m20.970489282s ago: executing program 0 (id=4683): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000480)="cd", 0x1}], 0x1, 0x7, 0x1) close(0x3) openat(r1, 0x0, 0x80402, 0x41) 5m20.727823033s ago: executing program 0 (id=4684): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc1004110, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4109, 0x100d}], 0x1, 0x7fffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 5m20.052763383s ago: executing program 6 (id=4687): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="edcd6e6136d558464b0600e5aca790e79d7c873be35b95f211a653c237edc68e88", 0x21}], 0x1, 0x2, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x6a, 0xa}) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000200)=0x10000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 5m19.474266837s ago: executing program 0 (id=4688): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3, 0x2000000}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x0, 0x2}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1, 0x0, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) read(r2, &(0x7f00000000c0)=""/37, 0x25) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000540)={{@host}, {@host=0x10}, 0x400, "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"}, 0x418}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000d00000001000000010000000300000009000000060000000100010000000000000000000000000002edea50c5233fae102bce54e3596efb005303790c3a893eb9d3b1a11e35e2129a9226012365e3a499ecd4bb95ffc2f84525569db9dc0a4cc34622005af4e17d725dbce6b2439cd085b2e32ecf145f976fe319ca3619f5ba926cbe7b23270e92f446f8c95fdf9a3e57258c2f9a5b72e32cebcb6339ca7788a897ce77c14fb54c157969a350c686d238e6c1edeec004707d"]) 5m19.12038665s ago: executing program 0 (id=4689): r0 = syz_open_dev$video(&(0x7f0000000400), 0x80000000, 0x10000) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x9}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x0, 0x202812, r1, 0x7dfff000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x2}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x357, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4, 0xfffffffe]}, 0x45c) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xf000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r6, 0x4b46, 0xffffffffffffffff) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r8, 0x1267, &(0x7f0000000040)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f00000003c0)) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x111080) ioctl$VIDIOC_QUERYCTRL(r9, 0xc02c5625, &(0x7f0000000580)={0xf0f000, 0x0, "40191df9a9dda8f1fce6b8da4d0ecb854e64b3a1573640154ca4642f8f4b05a1"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f0000002d80)={0x0, 0x3, &(0x7f0000002c80)=[0x0, 0x0, 0x0], &(0x7f0000002cc0), &(0x7f0000002d00), 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)) r11 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, 0x0) 5m19.018636127s ago: executing program 6 (id=4690): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x10}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x800, @local}, {0x2, 0xe0, 0x4, @loopback}, r1}}, 0x48) 5m18.750416983s ago: executing program 6 (id=4691): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 5m18.395482796s ago: executing program 6 (id=4692): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/154, 0x9a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0xfffffffffffffffb, 0xff, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=""/83, &(0x7f00000003c0)=""/4096, &(0x7f0000000080)=""/28, 0xffff1000}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000280)={0x18}, 0x18) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x3}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read(r0, &(0x7f0000000100)=""/154, 0x9a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0xfffffffffffffffb, 0xff, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=""/83, &(0x7f00000003c0)=""/4096, &(0x7f0000000080)=""/28, 0xffff1000}) (async) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000280)={0x18}, 0x18) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x3}) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) (async) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x0) (async) 5m18.056229632s ago: executing program 6 (id=4693): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write$snapshot(r1, 0x0, 0x0) write$snapshot(r1, 0x0, 0x1f) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5m17.378252264s ago: executing program 6 (id=4694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109c43, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109c43, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe68, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34325852}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400000000002, 0x2, 0x9, 0xfffffffe}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400000000002, 0x2, 0x9, 0xfffffffe}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x2, 0x0, 0x1}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x3, 0xca, &(0x7f0000000c80)="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"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000023000040000004008000000000000000"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, 0x0) syz_open_dev$loop(0x0, 0xa, 0x20000) (async) r7 = syz_open_dev$loop(0x0, 0xa, 0x20000) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) (async) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000000340)={"6864d7a9a89dad02d55485e4142fa7eaaa0f956f4e1dd8e38bab1da19b94", 0xfff, 0x5, 0x79, [0xffffffff, 0xf, 0x410, 0xe312, 0x0, 0x4, 0x8, 0xe21f, 0x9, 0x7fff, 0x7, 0x4, 0x9, 0x4, 0x2, 0xa, 0x8001, 0x420]}) (async) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000000340)={"6864d7a9a89dad02d55485e4142fa7eaaa0f956f4e1dd8e38bab1da19b94", 0xfff, 0x5, 0x79, [0xffffffff, 0xf, 0x410, 0xe312, 0x0, 0x4, 0x8, 0xe21f, 0x9, 0x7fff, 0x7, 0x4, 0x9, 0x4, 0x2, 0xa, 0x8001, 0x420]}) write$snapshot(r10, 0x0, 0x0) (async) write$snapshot(r10, 0x0, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000002c0)={0x5, 0x5, [{0x0, 0x0, 0x1}, {0x80, 0x0, 0xfff}, {0x2, 0x0, 0x40}, {0x2, 0x0, 0x2}, {0x80000001, 0x0, 0x5}]}) 5m17.30609983s ago: executing program 4 (id=4695): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003600), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000003640)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4bfb, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x1010, r4, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) 5m16.474093129s ago: executing program 4 (id=4697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x1, 0x9152, 0x6bf, 0x8, 0x23, {0x800008, 0x2, 0x100000001, 0x0, 0x806, 0x3, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x7}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x100002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000240)={0x1, 0x80}, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {0x7}, {0x2}, @rumble={0x4000}}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(r1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{0xfffffff7, 0x1, 0x6, 0x4}, 0x8, 0x18f, &(0x7f0000000200)={{0x3, 0x2, 0xd, 0x100}, &(0x7f00000001c0)={{0x35e, 0x8, 0x6, 0x3}, &(0x7f0000000000)={{0x257, 0x7fffffff, 0x9000, 0xe}}}}, 0xfff, &(0x7f0000000240)="aac506d40d102bf0e549e13aa9585dd13ac1c8f0efdb8e769d806828afe1304aa667dd24458e7e48423b4e347895b579db36467af38eba2fd217102ff85f29215cd8d4479914d36ca2073f7bfb876eeb38800ce3ec7f702bb62a3927bee9588b432393538d84d5e6e5389ffa358866f5f9f69596eb87d0d6e39be8bc1c8d0b14f60e6d2991b889cc9dc25cd015eedfeb4d54c4479435c9", 0x2}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) dup(r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)) write$ppp(r8, 0x0, 0x0) 5m3.789685768s ago: executing program 36 (id=4689): r0 = syz_open_dev$video(&(0x7f0000000400), 0x80000000, 0x10000) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x9}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x0, 0x202812, r1, 0x7dfff000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x2}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x357, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4, 0xfffffffe]}, 0x45c) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xf000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r6, 0x4b46, 0xffffffffffffffff) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r8, 0x1267, &(0x7f0000000040)) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f00000003c0)) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x111080) ioctl$VIDIOC_QUERYCTRL(r9, 0xc02c5625, &(0x7f0000000580)={0xf0f000, 0x0, "40191df9a9dda8f1fce6b8da4d0ecb854e64b3a1573640154ca4642f8f4b05a1"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$FBIOPUTCMAP(r10, 0x4605, &(0x7f0000002d80)={0x0, 0x3, &(0x7f0000002c80)=[0x0, 0x0, 0x0], &(0x7f0000002cc0), &(0x7f0000002d00), 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)) r11 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, 0x0) 5m2.111672758s ago: executing program 37 (id=4694): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109c43, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109c43, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe68, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34325852}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400000000002, 0x2, 0x9, 0xfffffffe}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400000000002, 0x2, 0x9, 0xfffffffe}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x401, 0x1, 0x2, 0x0, 0x1}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x4, 0x5, 0x3, 0xca, &(0x7f0000000c80)="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"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000023000040000004008000000000000000"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, 0x0) syz_open_dev$loop(0x0, 0xa, 0x20000) (async) r7 = syz_open_dev$loop(0x0, 0xa, 0x20000) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) (async) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000000340)={"6864d7a9a89dad02d55485e4142fa7eaaa0f956f4e1dd8e38bab1da19b94", 0xfff, 0x5, 0x79, [0xffffffff, 0xf, 0x410, 0xe312, 0x0, 0x4, 0x8, 0xe21f, 0x9, 0x7fff, 0x7, 0x4, 0x9, 0x4, 0x2, 0xa, 0x8001, 0x420]}) (async) ioctl$SNDCTL_MIDI_INFO(r8, 0xc074510c, &(0x7f0000000340)={"6864d7a9a89dad02d55485e4142fa7eaaa0f956f4e1dd8e38bab1da19b94", 0xfff, 0x5, 0x79, [0xffffffff, 0xf, 0x410, 0xe312, 0x0, 0x4, 0x8, 0xe21f, 0x9, 0x7fff, 0x7, 0x4, 0x9, 0x4, 0x2, 0xa, 0x8001, 0x420]}) write$snapshot(r10, 0x0, 0x0) (async) write$snapshot(r10, 0x0, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000002c0)={0x5, 0x5, [{0x0, 0x0, 0x1}, {0x80, 0x0, 0xfff}, {0x2, 0x0, 0x40}, {0x2, 0x0, 0x2}, {0x80000001, 0x0, 0x5}]}) 5m0.996175988s ago: executing program 38 (id=4697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x1, 0x9152, 0x6bf, 0x8, 0x23, {0x800008, 0x2, 0x100000001, 0x0, 0x806, 0x3, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x7}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x100002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000240)={0x1, 0x80}, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {0x7}, {0x2}, @rumble={0x4000}}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(r1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x3, @win={{0xfffffff7, 0x1, 0x6, 0x4}, 0x8, 0x18f, &(0x7f0000000200)={{0x3, 0x2, 0xd, 0x100}, &(0x7f00000001c0)={{0x35e, 0x8, 0x6, 0x3}, &(0x7f0000000000)={{0x257, 0x7fffffff, 0x9000, 0xe}}}}, 0xfff, &(0x7f0000000240)="aac506d40d102bf0e549e13aa9585dd13ac1c8f0efdb8e769d806828afe1304aa667dd24458e7e48423b4e347895b579db36467af38eba2fd217102ff85f29215cd8d4479914d36ca2073f7bfb876eeb38800ce3ec7f702bb62a3927bee9588b432393538d84d5e6e5389ffa358866f5f9f69596eb87d0d6e39be8bc1c8d0b14f60e6d2991b889cc9dc25cd015eedfeb4d54c4479435c9", 0x2}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r7, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) dup(r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)) write$ppp(r8, 0x0, 0x0) 44.466432577s ago: executing program 1 (id=5870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f0000001200)=""/4080, 0xff0) r2 = dup(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x1, r4, 0x0, 0x3, 0xb}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 43.791256249s ago: executing program 1 (id=5875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x58b401, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0xb5315241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}}) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0) ioctl$BLKPBSZGET(r5, 0x80081280, &(0x7f0000000000)) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 43.560438337s ago: executing program 9 (id=5878): r0 = syz_open_dev$loop(&(0x7f0000000540), 0x7, 0x81) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) (async, rerun: 32) r6 = syz_open_dev$video(&(0x7f0000003a40), 0x8, 0x0) (rerun: 32) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000003a80)={0x5}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f00000002c0)={0x20, r5, &(0x7f0000000280)}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r7}) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5}) (async, rerun: 64) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) (async, rerun: 64) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2}) (async) close(r1) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002680)={'\x00', 0x8, 0x1, 0xffffffff, 0xffffffffffffac62, 0x7947ce06}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) (async, rerun: 64) r9 = syz_open_dev$video(&(0x7f0000000640), 0x7, 0x0) (rerun: 64) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000000)={0x5}) (async) syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x128400) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async, rerun: 64) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6e8940, 0x0) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r11}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r3, 0x0, r11}) (async, rerun: 32) mmap(&(0x7f0000788000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x2010, r10, 0x92e20000) (async) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'}) 43.35849449s ago: executing program 1 (id=5880): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) read(0xffffffffffffffff, &(0x7f00000001c0)=""/148, 0x94) (async, rerun: 32) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 43.357976264s ago: executing program 9 (id=5881): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123a81, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x88081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r3, 0x0, 0x5, 0xb}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000040)={0x18, r3, 0x1, 0x0, &(0x7f0000000100)=[{0x3, 0x1000}]}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "1271a2ab78fce00d9683dda1af1ea89d62b7080a01000000000300008a0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r9, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r8, 0x0, &(0x7f0000000040)='x', 0x1, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r10, 0x0, r8}) openat(r5, &(0x7f0000000200)='./file0\x00', 0x402041, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) ioctl$BLKGETSIZE64(r11, 0x80081272, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r11, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 43.099845313s ago: executing program 1 (id=5883): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000980)={0x0}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000980)={0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 43.069357392s ago: executing program 9 (id=5884): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000240)={0xe61, 0x6}) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async, rerun: 64) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (rerun: 64) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async, rerun: 32) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000140)=0x8) (async, rerun: 32) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0x0, 0x0, {{0x2, 0x5, 0x0, 0x6bf, 0x8, 0x1, {0x6, 0xd98200, 0x100000001, 0x400000000, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x5, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x800) read$FUSE(r4, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000001c0)={0x6, 0x205625e0, 0x682, 0xf7ae, 0x4, 0xfffffffc}) (async) r7 = dup(r6) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x15) (async) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) mmap$fb(&(0x7f0000065000/0x4000)=nil, 0x4000, 0x2, 0x12, r7, 0x32000) (async) ioctl$EVIOCGBITSND(r9, 0x80404532, &(0x7f00000003c0)=""/4096) (async) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x28011, r7, 0x9c282000) (async, rerun: 32) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3008}}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x7, 0x80600}) 42.841304418s ago: executing program 1 (id=5886): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) dup(0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000034d564b"]) (async) ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x390}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 32) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r11, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) (async) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040878cbd5b87"]) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r13, 0x0, 0x97, 0x6}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r13, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r13}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae01, 0x1) (async) read(r14, &(0x7f0000000100)=""/159, 0x9f) 41.962102075s ago: executing program 1 (id=5890): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x6, 0x20, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$amidi(&(0x7f0000000140), 0x10000, 0x40000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000180)={{r0}, "86f39e6e3d17ca56dda8114d207c102f8417b6a2aca097d5f54f7daae30812ec0e8d3bfff4ccf97a84ed61b9201bf2352e8d02141a34a614818ef0a956abe87a4cdf71a14c11663f4ab7ca50bee2b6498ab96053b361b71103d69a399c806a76c359f2e265cb9329b94d715ef49ab3131abda29150e9e18848665e942bdcd6effbdbb87f9142925162e5038362a282d27e1c3285e78027958ce1829b15166b1ad86b21526743aaf64bf580fac9eac7e3295351c683453240cfa713e5a25d86b762b0095f072f1475dde7d3643feabd4b9e708b22f4168d96ac269d2812f4c8d5e7c95036b10fb6fe416542126b7272bbcbec6caeccdbe9d49c2e0819b77ec5ec8394cafbd9be03aec14193f9e7ef3c12d7ee29d887752bbfd9d92ec4ed446cfe8585407c6d78a17d38478f53ac1b3f41f2142b77c6e805925617c292f63c9bd7db1862da73195f3d91661a95cb4a375f54bc89a40ee0f99bad4c6354e6347bdc0f10f763580b2f63b6fca597eb6767b13148b72321697a228e98d51f1c03a8d5d0cd98a928998e1a2fd59cb8b1a1596188e82f648028ae68d9a1d864e1eea5f19476256e1429f7df20ae3ddf2b9f8c15a00ee2392a26367fb68cb9eacdc14dbbd55594bd005111175dc6a39b5064534f73d6108c11462ccb07de7e8a0956552b3550770f9648b021fbeb69d222fb15547cb1a8ce9262391ae3c2747d4a6362cea72ca834f1b0a6ff903a0985362cbb3c6aeb7f1605f0e87264afc983c64441d11653e542534c9a19c2cb825a76a6215ced0eec7affdf350f4c965b921c297ac92f56f3fa0fc60c0f6bbe49ce555e061dd9c4e92b5647740ec2a2d59f30872cbe52f22bc6bcd937d744bf9983d1f763fff4c6b2a304f0e125b333a6889ffe53753f6d48acef1ae4ff10f052f53b0f38d763d2e1b3ddcfae0fa81f7ff2649a1ba541f98a7c75e667f920a3f19747983830aaf4c9d9cfcc3afbb5bbe7d9609516506f93f04804bd50efcd27eaad8481d4677877e6e5a6e2da597dbc5ace7827544f2b2b55a1cfa4988eb10a61e12d8b29d44768d65f90bddd3c027e877ee98d16edbf9e0410113c59841064bc3e6711478b21f9f22b7a24f176a6a41face2bde41eed734a86461966c55a3813096e848fdf42a276d959e1e246405ff4944e3f7b09253e459d89b6de77758ea9c7048fe446b59c04c0d6f99ba93d73d7014d1b4a89b1a4c0c3e95af6354f569bbc8f6c9a03ac7bcbb33be89811b0738387c73ef5e98534421f1ba56e196c438653a4de3f468a6be40f95f5ad3a16d3834832d7e614efc6ac55cd3c0c4075c2b54b3d9bf97062ca9e995d6f82154683f8d7cbc3754740a25722e5ff2ff1f75b52d340c746479827b612b17ee0de88a24707b12d57a53411200e7f34fd0a2f1a750b70d189dc375a8fd5ca7d0c722f8a6f43d0d37dbd4a6dd6eb88889cfeea405db21e75a3b6fca2d72e3747bc0f11ca4e8a00b5cc1ce0b6b6f27d8b3b4e3c4a407010360c57f4fd005ccd72e56da3d9c21c5fc3afc430b9b20c220902dd32a932168f6393f8bbcd0cd7ffc3d1c239e90bf32a665d8c725ed0f6707cf92be346f90e2d0858b47531bbc5b3d1cd5ae519da6200d03db15791be1fffd5025bdd32cdfa2de99ae3f871ae41ff51b4baafc8d5a37c1fa76f9d7d65f4d6a20418f95fa2d8a638f4c0d9d8f1039d414acfe34a62e5d26a594c628e905b729446c6d5e006c9ce2fc2690ef3455c12c624e2249ee4f1d1943d86b5e1d3a62c967df0cfda978216e905ba7716c4fedd2d44a529ae0cd9a68b77cad6c1d605bc31772c152121b7dc080428b21446a5b7c38352b9d219bd4735c5124aedeadceb87378937fc78d30cd51c4594c79b5dd557e4b90b9619b99764853783499fcf006601977805baf0a88897f72d071942c90046055bb9281ba4a5515397bfde1e145848e226f628730571f27f8564894b1a62f3a0d003f3dccb12274528c0b801df1a972793f82248e68fb07f53ce6a1800e21b42bad1c61b3aa8f3bf213d0e38f8ddc82948588fda3261655c0ba23d3bee714b428cd160eff3f1c2a665999cda5d93779a257e06f2516d6d05c82e42cc430ba6f7395867ce07c419479d5012610180df9125abf188d011dbc7f199f0699bd9d194c45223ca59fcfef581236c913aea6dba68dff94a759ffcda95745a33753e46bdaf0df8ed7a515044ca0a362ba5e6b47bae0ba55a858e7c5e3901ff9c5bcc66c02b7e032901637a5157b4d51a92d26113d380a2898b2041bd92131f694d0dd83121e8498ac42646e16403f2a1cb66fe3045b96c4791475c4df66fed1566d0685aac75812828d28ed3353c5707d655b02fea10730312d8691b43291d8573c5873b005515810b9654e13905da8d2203c04eecede8567fcea1af8d2e150efcc9a00213544cba418fedd7bbdc98aeb8e79d2f8985df8ef84ba638d7205f4fac2bee5cb400e107c38f1ec597874d42a145668329075394b8a2a812b94c9212b3b63b8f59fb4e6ea777817844578ec70ca0f2caf4662aca024dbdd8ce722609d385b95004cbc5cbb4cfec5f6925d0cdc8bc051b9eb5d7c71d3cba5e38106649f2c9c9d91a92fd76efc21532400da72b32d9bc359ac3001a13061ef1681bb3b347d6788bc1e05a481502eb177f6818db9bc539ee52439f2692c84ef8f5aba9aa644fb9b7035f77b47c5759a73ae14bd99c9d5a9f5724488dfe4518229ad0992c5ebb0fbcc604c90a67980fed64e2f81eec755c0041bb46bd0aa28e81e85248a48d68081c0715088cfcd121386e6b4c296744abc6f83cc8522c330f733c4527b310ab876d327c61aaa01f90cef88f213e6a44538155d648c896730f7293019f4d24bd882154f0228d3dab61ca4fc7858af07cdf83e8e9d581cf0cd48c1b82937c3857e27f9c55551dbbc5f422726a4d849c4b20dfcf0bbd173922d5b58dabf113d96eb33f740584df8c378458af4b7167cad25aef840b1acd88ca8907cb31764305046d8087bd8d5a1611fc9f14d4aded9db490e16bbb2ad0e811dd808cd99c8e1ae283e9fc4b311977e20d18032cd74e9119cb67c3a8b9fc43f9b693a83a7da6a5025d861d5b4d4af178976fd76feb2bffc0cfe23c698d542ba855a200844c462bc5a67ee88b450ae35184f385dbf4130a8b994dd5745c9ad4591e18a75c81b2facf9f573b7a64f125ba0644af934cfe08c1db727da67f74830a3ad3f715159503f17f54d76a58545feb5549776e8fc151e40b740e3c47a25bdf5aeff865d68153907ef3d835a41611bde48f69b3314b63d5876b047be34e6961fdcb42d1bafaaf8aa8d4dfb01380a657e76c3cdaed935940f1dd46c89a3c8134493ea5415d251d0561b4ead37ac1450943ce5e5af882e4f8ce61e7b18790a8d4eaca123bdd8173560595ac3087df9fd47047a65ca7654a1ffd219fd3134e56324145286975c9185af2e5f9c11fa9be582bf6a04f65b0806238f8491e7560500f69ff8b8a233202774c91c397b1a25716c0d40b195fe70c65b3f9c187b1d8d3324a7a9e2e855963c3439cac4c28d8f12e0059f9f3361d50546ef67b840762363ddca11548c0aab9187da17646b1e70c92f79fb6f034010a5ff2c10f1d2763f7ed6d3d9cbf131c295901138917c943737d17c95b458e3ec6ff56772fa187d04a203020d4916641f7eb42bae86626846efa30f55b630f243f030cfdaa2779aaf4b6ca7b6edc281250e16246cd6956d8e7e3fe99052acc4da1fd894a9ec0544ace1a955e51f2d630dac7776bb63ccf43559cf65c3460bf7acc9335d4a16a47c001748afef2987081d3fd5e722723b29f86da8af0909ad1409b734976f1138ea773475ff72716936bb4ede3bfb6d7788c724daf7ed33977c0e79258b74ced679ab435964caea7a779c98f4eaf45f3a028bbe04a4da6757d16722e2a074566486cd2a8c1a894769adc20aeda8c51c9cef8dbcdadb4100074bf6b89faba0a039bdc906235f82302375fc7b1deda4c55280bb47be0f21990d31da8c3a7d687e6b29d9c9295bf26dcf7880d655692f19492ad8a5164e0b4208f6f03d25dc06067dba98ea8ce280b70f91216bf57e367037cd8954aff41eafd9e79f65b567182140bb1b742d3f6fedcac20de20f1627f42d66507b2a9ff12823d3a0661337ce69a8b39a55268392dee5a6f0574671585b4eaee18e9e0c6d8e02bc9c1c5daa43bc15f34d3cf192f31edbfef46fd27344a6bd5d4b0b716be511f997763834fca713e6720605c17c2b9b1baeb17ed2805e7d3cd066f247c3ca9560df199c7b0ee825842f65afc2573b71c3f9571641323c8640f07c4fd9e61f8f9271a3f59a724aac62a1f0844cd393e34327637b71abd51bca6f2f35037401183e943c57aab9f61fd2dfb3dfef57f209eea37e1eb5f5423b0bfa4cb9cec8eb25cfa48dd7c5cd216f9f7c9ea67f2792975cb49878074d306124fe73c864884183f720372088067018f6673c502879b01fe19c8d3f86fe0894b587f2fcf0c2e3c8d1a731f349821030712218638d37e9079c43525491c1be30d1ef933d548c39d3d139a721171123dfe5edfa4e2654fa201f27bab240ba80e919a4718d1691f5afe3b61edcf47c5f49eb5a3ee461667b02750743edbee05074181bcbd57b94c22782c877e4dc1ca6f2f93ce7bf9236ed419d7e0eff73ad71135f7c8d1e5ecb60e885cda08bbdb0537570c834e24f4c6788b65dc0722185dfb23529c6cb8c3a172b6f41a09906e66abb9565a278a9de5e8b9fcb3d21429f0930226e8dc884c9cf59eb55c650cf2a4ba6c1c914c8c4580054d391bf6b708ad9be5f2d297981b03799d3537d2823a7ed7a1efdf4a717f6c874f9f39b450e2cdbc299b1aeea6f5a02cd51cc28b7acef6c73be9f511c48e320a331628d976c78ab596b49c72eb18879f20e9c70782097c82beb6ada201fd5434964f2959caf4d815b9d6f429a324504c407be9d702958ebd1942518aebc867fb071f1982de32c708cb04bd56984529eaee6156d67157d5a0927a270f2590e63a7de731fbe662477f5a1dacb85cbffc4e00e399a6c99c7599716aca97ea141ea4ce78a2d730ef25710c2bbd3b65e246e51103c96057ed8a9c6243b3f9837b7c522da10c073295563a78bfc67fa3c6463cf5ab967a8302ac48d5f880e402fc03b8343327c17930ba09ca73e18febed3d7a2d6778749edbb374c504fa1764d15a37ac146ceeec408c3b7d94e23081b290ef719264b460f044caea25d819e425153f160cfdadeacef2a786dfb492fe53418f057cf3a43549de83ad609f04646441fc6b6971477b56108fd2a5f334ea861694a699c231d931f5687b2c9cf7b13f254e66094ee146e21eda15997221961a04f5167a3e4e1aff35ce1aec8af52916d6a2ae23869ff28c3ae2bf8caefc58e92d234e175a436df99f45de3ac18e1dab62fd407c8ebdb171aa0633b8839c00096f1cdf2f65721ff6e3c326b0190351cd926d368542a44f5df4cc1e1f010ab3cf9ef47fb42059c9fc0585ce473bbfa2129b5f14d69a8db45b13e2409dca66d1b80b8c150e3ce29c7e6712154ec20584b165c9df096f9a8dfbd7d6c76270b3da0544102cc71dfd5d53eb4591d8bb6cce679a4aec246578dd508346f0d3016165801ab4f573720aa08f895ec4172b40d77e598ec82073abade3e4c37680f7371f67dedf31a23bf382fa2db17eb1f065b3570e6634e04e1313a6ee1f03961b42ec526cfb6a2894c8af3da959c30bab36afc924380b3e53b515a4b5"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000011c0)=0x1) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000001200)=""/119) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x200000, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000001300)={0x5, 0x8, [0x4, 0x82, 0x3ff, 0x6], &(0x7f00000012c0)=[0x0]}) read$nci(r3, &(0x7f0000001340)=""/69, 0x45) r4 = syz_open_dev$amidi(&(0x7f00000013c0), 0x0, 0x424400) read$nci(r1, &(0x7f0000001400)=""/52, 0x34) write$apparmor_exec(r1, &(0x7f0000001440)={'stack ', '/dev/amidi#\x00'}, 0x12) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000001480)=""/119) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000001500)) write$ppp(r1, &(0x7f0000001640)="b38d640557575f3314a48ff5829fe87a8999583f71b7035e69394fe71d34eb3a5b9854d2a6a7172e15f886f6409411876157aac771975c097a9f8bf39e9128340f35ab4660e2721744477ff99894ae045771d945dcaf00680292830768d57f96a2e53039779da98af1582ab5fee288fef328622c23bbc4da50ae215ffdbda75fb8fee19e8ca119371041c45e36a84b562eae8b", 0x93) write$ppp(r1, &(0x7f0000001700)="0b9a73711a445dbba6da886a5d1bf07a47cc43dab5199b53d930c8201d65a4562c4d403607bc13f542870fc9bd583336f41d005b555a9a64081d43e29ca118d16b2ed5d52f283dcfa735bfea0b3c096a2a0563b585162457d6dcf57b38cdfd0e4db9237ce4b5581c850fc4cc4bd826d292984c98395cab4117fa71cf74b8668f1053448e6bd9f509d788bc69f64e5d24ffd06aa26dada294ab2bc894ded89065db220c5e381e0d382472624d8acb53119cee7c1f54c78302cdb0d9b18e33a45e1172ff889e62", 0xc6) r5 = syz_open_dev$vivid(&(0x7f0000001800), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000001840)={0x0, 0x0, 0x103, 0x2, {0x9, 0x6, 0x1, 0x4}}) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000001880)={'macvtap0\x00', 0x200}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) dup(r6) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001900)=0x20) r7 = syz_open_dev$evdev(&(0x7f0000001940), 0x4, 0x204500) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001980)=""/87) pwritev(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)="2bfa8742", 0x4}], 0x1, 0x4, 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001bc0)={0x14, 0x0, &(0x7f0000001a80)=[@increfs_done={0x40106308, 0x2}], 0xe4, 0x0, &(0x7f0000001ac0)="2abf52781843fb064491d1925a16aa802dbc94f55f0baa81fa2c633aa49752996a2d53c9bbbf3d0421612fa20a845a1fdb6100c57d4183b643478cfc98e0ddd4644a9c7eb9d29ea52a65acd1a674d34fef7ce68a206a7662df3930f1c38e7e0f7a816455ca45237e55c4244ed738b1dc75000899b7c4700e395b4e14631e928dd1a063b9fa95db8f5cc0255dbd4e0455ecb27c47fcd858673ccc2e51995bd35c8bbfa33890a076a69776bf8ebb32cd2dca5bdd4d75f1eb6878f0b15b119a3a2af7136f93479a32dcd706d6308948f733545bc778fbdf50c27c87f2a9a07b00a1d45bd23f"}) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x80000001) 34.410534708s ago: executing program 9 (id=5935): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x0, "0092938eda08a5513db99d08fdae429e4ae4c5bac9dd8259be4ee64b32c65e0a", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000280)={"334f00d6daf062d63d5e4449e903f93e48fe794d00c0adb017e82000008982ac", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0383e04, &(0x7f0000000140)={"e3fe98873d275ac4650da6ff0d7ee4c0cda5a703827becb26eba2497c5271959", 0xffffffffffffffff, 0xffffffffffffffff, 0x2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 33.872954873s ago: executing program 9 (id=5940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="011dd400000000000000920000400000000000000000fad6"]) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write(r5, &(0x7f00000001c0)="8aaf3ac091e35a9d581cc9f416114c0e7ebaf90365cb04c6c3d586df4bd5a37f5593171643e92c3d2c34e121170d02ab9f8cf5c732ea1a1afab57b66de20f3a6e683f817f5c7636d3c84f06f3c7dea9dec02d7eb6d57c7705938f268adf8a192e31a6d6affe66e57d0020c5f1db81b33bf2c85899fb14ff06a3ff100d2b1799db57f08cd70d0dcc47beeea3f3e63ec922ff90f9db61f436bfd9ae0ee3e298f5923cc5ff4a5977e2f4723625b8395d3449613457f1b7923a2f60f0f0f1d0f90a9a1fce8f724b3ceb26219698c1d726c466c9ec7c6eee43c2b", 0xd8) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r6, &(0x7f00000003c0)=""/169, 0xa9) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000002c0)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f00000000c0)={{@any, 0x6}, @any, 0x1, 0xfffffffffffffffa, 0x6, 0x3, 0x2, 0x2, 0xf4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10010, r6, 0x1000000000040000) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r9) 33.318418464s ago: executing program 9 (id=5944): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x591202, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) close(0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) read$msr(r5, &(0x7f0000000200)=""/104, 0x68) 31.678304295s ago: executing program 8 (id=5950): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x202f00, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) (async) r7 = dup(r6) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x82fa, 0x0, '\x00U\x00'}) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) r8 = syz_open_dev$midi(&(0x7f0000001740), 0x7, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000001780)={0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 31.319584292s ago: executing program 8 (id=5951): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) read(r0, &(0x7f0000000040)=""/138, 0x9d) 31.186380655s ago: executing program 8 (id=5953): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write(r1, &(0x7f0000000200)="7234da3fd23bc5b32344c44fcadc4af6555737836e0d741706ef91556d8bf01644d1b52ed8b12b2e3c95398f8dfdeb006d33ac9a00d3e5c6edc68c0b571b2a1d17fb5de7507587b41ca6936b04d5c582a5646ea71cdb4bcc04ee14008884f3359e767b7e15b432ac42bcfddf278521008e18f0cb6f8e5718dce765994af3064513103e07f7e4fe22c4c1b543d91d56c52be8e4027de8bc8bf4d0fd54ec", 0x9d) write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x2, 0x2000, 0x1}) 30.829309345s ago: executing program 8 (id=5955): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r3, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r4, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfd, @tick, {0x5}, {0xe}, @connect={{}, {0x1, 0x7}}}], 0xfdc1) ioctl$BLKOPENZONE(r3, 0x40101286, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x8, 0x40}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000006569c0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) preadv(r7, &(0x7f000001ac40)=[{&(0x7f0000019640)=""/235, 0xeb}], 0x1, 0xde, 0x2) r8 = dup(r6) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x9b}, 'port0\x00', 0x0, 0x2a1e76d0bd0a5534, 0x0, 0x0, 0x0, 0x6e17, 0x0, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 30.373890763s ago: executing program 8 (id=5957): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}, 0xfffffffffffffffc, 0x800000000000002}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r4, &(0x7f00000001c0)=""/166, 0xa6) 30.087739937s ago: executing program 8 (id=5958): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x47aa81, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 26.806395658s ago: executing program 39 (id=5890): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x6, 0x20, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) syz_open_dev$amidi(&(0x7f0000000140), 0x10000, 0x40000) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000180)={{r0}, "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"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000011c0)=0x1) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000001200)=""/119) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001280), 0x200000, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000001300)={0x5, 0x8, [0x4, 0x82, 0x3ff, 0x6], &(0x7f00000012c0)=[0x0]}) read$nci(r3, &(0x7f0000001340)=""/69, 0x45) r4 = syz_open_dev$amidi(&(0x7f00000013c0), 0x0, 0x424400) read$nci(r1, &(0x7f0000001400)=""/52, 0x34) write$apparmor_exec(r1, &(0x7f0000001440)={'stack ', '/dev/amidi#\x00'}, 0x12) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000001480)=""/119) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000001500)) write$ppp(r1, &(0x7f0000001640)="b38d640557575f3314a48ff5829fe87a8999583f71b7035e69394fe71d34eb3a5b9854d2a6a7172e15f886f6409411876157aac771975c097a9f8bf39e9128340f35ab4660e2721744477ff99894ae045771d945dcaf00680292830768d57f96a2e53039779da98af1582ab5fee288fef328622c23bbc4da50ae215ffdbda75fb8fee19e8ca119371041c45e36a84b562eae8b", 0x93) write$ppp(r1, &(0x7f0000001700)="0b9a73711a445dbba6da886a5d1bf07a47cc43dab5199b53d930c8201d65a4562c4d403607bc13f542870fc9bd583336f41d005b555a9a64081d43e29ca118d16b2ed5d52f283dcfa735bfea0b3c096a2a0563b585162457d6dcf57b38cdfd0e4db9237ce4b5581c850fc4cc4bd826d292984c98395cab4117fa71cf74b8668f1053448e6bd9f509d788bc69f64e5d24ffd06aa26dada294ab2bc894ded89065db220c5e381e0d382472624d8acb53119cee7c1f54c78302cdb0d9b18e33a45e1172ff889e62", 0xc6) r5 = syz_open_dev$vivid(&(0x7f0000001800), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000001840)={0x0, 0x0, 0x103, 0x2, {0x9, 0x6, 0x1, 0x4}}) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000001880)={'macvtap0\x00', 0x200}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0) dup(r6) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001900)=0x20) r7 = syz_open_dev$evdev(&(0x7f0000001940), 0x4, 0x204500) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001980)=""/87) pwritev(r5, &(0x7f0000001a40)=[{&(0x7f0000001a00)="2bfa8742", 0x4}], 0x1, 0x4, 0x3) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001bc0)={0x14, 0x0, &(0x7f0000001a80)=[@increfs_done={0x40106308, 0x2}], 0xe4, 0x0, &(0x7f0000001ac0)="2abf52781843fb064491d1925a16aa802dbc94f55f0baa81fa2c633aa49752996a2d53c9bbbf3d0421612fa20a845a1fdb6100c57d4183b643478cfc98e0ddd4644a9c7eb9d29ea52a65acd1a674d34fef7ce68a206a7662df3930f1c38e7e0f7a816455ca45237e55c4244ed738b1dc75000899b7c4700e395b4e14631e928dd1a063b9fa95db8f5cc0255dbd4e0455ecb27c47fcd858673ccc2e51995bd35c8bbfa33890a076a69776bf8ebb32cd2dca5bdd4d75f1eb6878f0b15b119a3a2af7136f93479a32dcd706d6308948f733545bc778fbdf50c27c87f2a9a07b00a1d45bd23f"}) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x80000001) 18.202663048s ago: executing program 40 (id=5944): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x591202, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) close(0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) read$msr(r5, &(0x7f0000000200)=""/104, 0x68) 16.560057952s ago: executing program 7 (id=5992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x28200, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000000240)=""/161, 0xa1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r8, &(0x7f0000001c80)="b1", 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, &(0x7f0000000780), 0x0, 0x1, 0x10) r9 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) dup(r9) 15.638666737s ago: executing program 7 (id=5993): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0x0, 0x2}) read(r0, &(0x7f00000001c0)=""/157, 0x9d) 15.54649977s ago: executing program 7 (id=5994): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) 15.421786152s ago: executing program 7 (id=5995): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x37) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 15.346834739s ago: executing program 7 (id=5996): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x6, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) openat(r1, 0x0, 0x80402, 0x41) 15.094343422s ago: executing program 7 (id=5997): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x0, 0x3, 0xa, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x6c, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x17bec6, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000d90100000000000000005500000000005134b8984c88f16a64cc"]) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0xe, 0x0, 0x2004c8, 0x8000000, 0x7, 0x8, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) pwritev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)="56e5566b207cb0c7c4b17f87617ed8cb", 0x10}, {&(0x7f00000000c0)="7e186f9f03255831766bb72cbc76492935fa54fa8657e16f7b7beeca69d68b45876072ea82604c4cecde0c7c20bd5f3f5e06631cd3dedfa961e876ae4e3c565fe61e346588223f2f653aa967709bf5f28756c86b9a28ec09555b6d2453f2db39c3d2710315c103c24d2672884127aad4de67669416d47cc1d8c06a421aa55cd4ca99acf2164e8d5931849b1085817dd3b415e2b9f3e6119307dd744571aec668dcde54c792d4d2613bb4", 0xaa}, {&(0x7f0000000180)="0e0a28b6e2b6ababed34b2dfac00a775c26815ab11ec02808647d3153479d9ebdcc9a4abf241f114eef5f88422e9a259425fd5", 0xffffffffffffffb7}, {&(0x7f00000002c0)="dcff615fb5bb58da3eeb2148667795803c9badd56b93eb6ae9c9820c587fbebb7eae13f25f91e7115e90afb78e46f86dd3fbfd428f48cd33382eeb16b8ea9abd7e51c165387f4b344be04dc7723856477b10bff957ac0e67013c18", 0x5b}], 0x4, 0xf739, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) 14.069411792s ago: executing program 41 (id=5958): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x47aa81, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 0s ago: executing program 42 (id=5997): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x0, 0x3, 0xa, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x6c, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x17bec6, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000d90100000000000000005500000000005134b8984c88f16a64cc"]) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0xe, 0x0, 0x2004c8, 0x8000000, 0x7, 0x8, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) r7 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) pwritev(r7, &(0x7f0000000200)=[{&(0x7f0000000080)="56e5566b207cb0c7c4b17f87617ed8cb", 0x10}, {&(0x7f00000000c0)="7e186f9f03255831766bb72cbc76492935fa54fa8657e16f7b7beeca69d68b45876072ea82604c4cecde0c7c20bd5f3f5e06631cd3dedfa961e876ae4e3c565fe61e346588223f2f653aa967709bf5f28756c86b9a28ec09555b6d2453f2db39c3d2710315c103c24d2672884127aad4de67669416d47cc1d8c06a421aa55cd4ca99acf2164e8d5931849b1085817dd3b415e2b9f3e6119307dd744571aec668dcde54c792d4d2613bb4", 0xaa}, {&(0x7f0000000180)="0e0a28b6e2b6ababed34b2dfac00a775c26815ab11ec02808647d3153479d9ebdcc9a4abf241f114eef5f88422e9a259425fd5", 0xffffffffffffffb7}, {&(0x7f00000002c0)="dcff615fb5bb58da3eeb2148667795803c9badd56b93eb6ae9c9820c587fbebb7eae13f25f91e7115e90afb78e46f86dd3fbfd428f48cd33382eeb16b8ea9abd7e51c165387f4b344be04dc7723856477b10bff957ac0e67013c18", 0x5b}], 0x4, 0xf739, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) kernel console output (not intermixed with test programs): known main item tag 0x0 [ 733.842929][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.842963][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.842987][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843011][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843045][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843085][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843122][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843144][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843184][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843208][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843232][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843256][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843280][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843314][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843337][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843360][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843383][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843406][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843428][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843469][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843494][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843518][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843542][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843566][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843590][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843615][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843639][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843663][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843687][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843711][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843735][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843759][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843783][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843807][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843831][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843855][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843879][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843903][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843928][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843958][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.843983][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844007][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844031][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844055][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844080][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844104][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844128][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844152][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844176][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844200][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844226][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844250][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844274][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844298][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844342][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844367][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844393][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844419][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844445][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844471][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844497][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844523][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844567][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844594][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844621][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844648][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844675][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844703][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844730][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844756][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844783][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844810][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844835][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844861][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844887][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844913][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844938][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844972][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.844998][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845024][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845049][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845075][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845100][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845127][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845154][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845180][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845207][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845234][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845261][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845287][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845313][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845340][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845366][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845393][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845420][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845446][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845473][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845498][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845524][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845551][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845576][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845602][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845628][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845665][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845690][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845715][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845739][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845775][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845799][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845822][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845844][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845869][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845892][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845915][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845938][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845967][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.845989][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846012][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846036][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846061][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846085][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846109][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846133][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846157][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846181][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846204][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846228][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846251][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846275][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846299][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846323][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846347][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846371][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846395][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846419][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846461][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846487][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846512][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846538][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846564][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846589][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846615][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846640][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846666][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846692][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846718][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846743][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846768][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846800][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846826][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846852][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846878][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846903][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846929][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.846965][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854758][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854788][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854815][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854849][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854885][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854920][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854956][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.854983][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855011][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855039][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855069][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855096][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855123][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855150][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855177][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855204][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855232][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855259][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855285][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855310][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855336][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855362][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855388][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855415][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855441][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855467][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855493][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855519][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855545][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855571][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855598][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855624][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855651][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855677][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855703][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855739][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855761][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855784][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855805][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855828][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855850][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855872][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855895][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855916][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855938][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855970][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.855993][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856016][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856037][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856058][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856080][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856101][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856121][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.856140][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868609][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868640][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868667][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868693][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868719][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868745][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868771][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868797][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868839][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868882][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868909][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.868936][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869000][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869028][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869053][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869079][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869105][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869131][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869157][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869185][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869212][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869238][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869265][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869291][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869318][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869345][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869372][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869399][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869425][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869452][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869478][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869505][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869531][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869558][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869585][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869611][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869638][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869664][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869690][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869717][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869743][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869770][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869796][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869823][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869849][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869875][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869901][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869927][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869964][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.869991][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870029][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870053][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870087][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870110][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870133][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870156][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870179][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870202][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870224][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870248][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870270][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870293][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870316][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870339][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870362][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870386][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870409][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870432][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870455][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870478][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870501][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870524][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870564][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870589][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870613][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870638][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870662][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870687][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870710][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870734][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870759][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870783][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870808][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870832][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870857][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870881][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870906][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870931][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870961][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.870986][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871010][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871035][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871059][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871084][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871108][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871133][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871158][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871182][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871207][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871232][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871256][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871280][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871305][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871329][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871354][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871378][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871403][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871427][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871451][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871476][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871501][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871525][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871567][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871593][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871619][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871646][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871672][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871708][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871733][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.871757][ T9] hid-generic 0000:8DF3:0001.000C: unknown main item tag 0x0 [ 733.889823][ T9] hid-generic 0000:8DF3:0001.000C: hidraw0: HID v0.07 Device [syz1] on syz1 [ 734.006162][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.006214][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.081351][T24057] fido_id[24057]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 734.180415][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.180437][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.572515][ T5836] Bluetooth: hci4: command tx timeout [ 734.605176][T24065] random: crng reseeded on system resumption [ 734.648975][T24065] Unrecognized hibernate image header format! [ 734.648991][T24065] PM: hibernation: Image mismatch: architecture specific data [ 735.221032][T24073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.554945][T24082] input: syz0 as /devices/virtual/input/input163 [ 735.807373][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.107260][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.448147][T24096] loop8: detected capacity change from 0 to 7 [ 747.221540][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.221596][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.232962][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.484006][T24104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.662088][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.975760][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 750.981757][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.013197][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 751.083418][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.093356][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 751.100235][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.111649][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 752.283029][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.302662][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 752.307923][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 753.146217][ T5158] Bluetooth: hci1: command tx timeout [ 753.240710][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 754.332348][ T5158] Bluetooth: hci5: command tx timeout [ 754.343067][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 755.292392][ T5158] Bluetooth: hci1: command tx timeout [ 755.299314][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 755.835562][T24131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.922353][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.119149][T24134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.414388][ T5836] Bluetooth: hci5: command tx timeout [ 757.378552][ T5836] Bluetooth: hci1: command tx timeout [ 757.796057][T24137] input: syz1 as /devices/virtual/input/input164 [ 757.874738][ T5836] Bluetooth: hci6: command tx timeout [ 758.064649][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.493054][ T5836] Bluetooth: hci5: command tx timeout [ 759.462330][ T5836] Bluetooth: hci1: command tx timeout [ 759.520072][ T13] bridge_slave_1: left allmulticast mode [ 759.520098][ T13] bridge_slave_1: left promiscuous mode [ 759.520271][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.593551][ T13] bridge_slave_0: left allmulticast mode [ 759.593599][ T13] bridge_slave_0: left promiscuous mode [ 759.593812][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.932222][ T5836] Bluetooth: hci6: command tx timeout [ 760.588929][ T5836] Bluetooth: hci5: command tx timeout [ 761.368728][T24175] ptm ptm30: ldisc open failed (-12), clearing slot 30 [ 761.604120][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.693444][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.746079][ T13] bond0 (unregistering): Released all slaves [ 761.891218][T24099] chnl_net:caif_netlink_parms(): no params data found [ 762.017719][ T5836] Bluetooth: hci6: command tx timeout [ 762.234894][T24109] chnl_net:caif_netlink_parms(): no params data found [ 762.247981][T24118] chnl_net:caif_netlink_parms(): no params data found [ 762.534908][T24099] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.552759][T24099] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.560007][T24099] bridge_slave_0: entered allmulticast mode [ 762.576148][T24099] bridge_slave_0: entered promiscuous mode [ 762.608628][ T3014] Bluetooth: hci0: Frame reassembly failed (-84) [ 762.624408][T24210] Bluetooth: hci0: Frame reassembly failed (-84) [ 762.878787][T24099] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.900771][T24099] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.927862][T24099] bridge_slave_1: entered allmulticast mode [ 762.941863][T24099] bridge_slave_1: entered promiscuous mode [ 763.313541][ T13] hsr_slave_0: left promiscuous mode [ 763.362317][ T13] hsr_slave_1: left promiscuous mode [ 763.368285][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.375961][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.422873][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.430287][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.537925][ T13] veth1_macvtap: left promiscuous mode [ 763.543702][ T13] veth0_macvtap: left promiscuous mode [ 763.549292][ T13] veth1_vlan: left promiscuous mode [ 763.554692][ T13] veth0_vlan: left promiscuous mode [ 764.092478][ T5847] Bluetooth: hci6: command tx timeout [ 764.652494][ T5847] Bluetooth: hci0: command 0x1003 tx timeout [ 764.654685][ T5836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 765.967647][ T13] team0 (unregistering): Port device team_slave_1 removed [ 766.192855][ T13] team0 (unregistering): Port device team_slave_0 removed [ 769.151590][T24099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.288225][T24228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.315029][T24099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.724238][T24118] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.731548][T24118] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.739286][T24118] bridge_slave_0: entered allmulticast mode [ 769.747692][T24118] bridge_slave_0: entered promiscuous mode [ 769.774728][T24099] team0: Port device team_slave_0 added [ 769.884451][T24109] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.891695][T24109] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.901155][T24109] bridge_slave_0: entered allmulticast mode [ 769.910515][T24109] bridge_slave_0: entered promiscuous mode [ 769.919925][T24109] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.927264][T24109] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.934768][T24109] bridge_slave_1: entered allmulticast mode [ 769.952086][T24109] bridge_slave_1: entered promiscuous mode [ 769.963427][T24118] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.972522][T24118] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.979808][T24118] bridge_slave_1: entered allmulticast mode [ 769.999952][T24118] bridge_slave_1: entered promiscuous mode [ 770.019915][T24099] team0: Port device team_slave_1 added [ 770.817494][T24109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.830360][T24118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.859581][T24099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.866988][T24099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.892955][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.901435][T24099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.915241][T24099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.922444][T24099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.948783][T24099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.962475][T24109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.076100][T24118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.394876][T24118] team0: Port device team_slave_0 added [ 771.406873][T24118] team0: Port device team_slave_1 added [ 771.416192][T24109] team0: Port device team_slave_0 added [ 771.424860][T24109] team0: Port device team_slave_1 added [ 771.721294][T24118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.735960][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.761875][ C1] vkms_vblank_simulate: vblank timer overrun [ 771.771834][T24118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.065882][T24109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.079192][T24109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.105191][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.123488][T24109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.433878][T24288] binder: 24287:24288 ioctl c018620c 200000000640 returned -22 [ 773.071439][T24298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.253985][T24118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.260968][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.287189][T24118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.311212][T24099] hsr_slave_0: entered promiscuous mode [ 773.317614][T24099] hsr_slave_1: entered promiscuous mode [ 773.324363][T24099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.332034][T24099] Cannot create hsr debugfs directory [ 773.444235][T24109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.451739][T24109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.477680][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.485291][T24109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.368330][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.784207][T24118] hsr_slave_0: entered promiscuous mode [ 774.801144][T24118] hsr_slave_1: entered promiscuous mode [ 774.807882][T24118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.821816][T24118] Cannot create hsr debugfs directory [ 774.851959][T24109] hsr_slave_0: entered promiscuous mode [ 774.860177][T24109] hsr_slave_1: entered promiscuous mode [ 774.871006][T24109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.887977][T24109] Cannot create hsr debugfs directory [ 775.077523][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.716629][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.034399][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.508637][T24099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 776.905830][T24099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 777.027067][T24099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 777.090652][T24099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 777.280851][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.544740][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.618280][T24099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.657601][T24099] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.805367][T24364] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 777.805386][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.823282][T24364] random: crng reseeded on system resumption [ 777.849574][T24364] Restarting kernel threads ... [ 777.860554][T24364] Done restarting kernel threads. [ 777.934052][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.941244][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.981012][T24364] program syz.7.4747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 778.147204][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.099257][T24381] program syz.7.4749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.255827][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.263031][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.273212][T24099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.037721][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.304312][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.397710][T24099] veth0_vlan: entered promiscuous mode [ 781.594319][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.656547][T24099] veth1_vlan: entered promiscuous mode [ 781.995333][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.101477][T24099] veth0_macvtap: entered promiscuous mode [ 782.120741][T24099] veth1_macvtap: entered promiscuous mode [ 782.195815][T24099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.210159][T24118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 782.262680][T24118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 782.328043][T24099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.377065][T24099] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.392913][T24099] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.401752][T24099] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.418371][T24099] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.474187][T24118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 782.528783][T24118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 782.957321][T24109] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 783.134026][T24109] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 783.235156][T24109] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 783.309713][T24109] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 783.401700][ T13] bridge_slave_1: left allmulticast mode [ 783.413446][ T13] bridge_slave_1: left promiscuous mode [ 783.419561][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.523755][ T13] bridge_slave_0: left allmulticast mode [ 783.529454][ T13] bridge_slave_0: left promiscuous mode [ 783.542397][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.615618][ T13] bridge_slave_1: left allmulticast mode [ 783.621330][ T13] bridge_slave_1: left promiscuous mode [ 783.628435][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.713443][ T13] bridge_slave_0: left allmulticast mode [ 783.719229][ T13] bridge_slave_0: left promiscuous mode [ 783.725985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.805533][ T13] bridge_slave_1: left allmulticast mode [ 783.811364][ T13] bridge_slave_1: left promiscuous mode [ 783.825067][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.908668][ T13] bridge_slave_0: left allmulticast mode [ 783.914427][ T13] bridge_slave_0: left promiscuous mode [ 783.920251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.164431][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.244152][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.303960][ T13] bond0 (unregistering): Released all slaves [ 787.964774][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.052884][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.096275][ T13] bond0 (unregistering): Released all slaves [ 789.742813][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.835879][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.894176][ T13] bond0 (unregistering): Released all slaves [ 789.978246][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.996142][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.148324][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.191439][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.298454][T24118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.387341][T24118] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.419360][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.426608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.466589][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.473843][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.510318][T24109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.611848][T24109] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.631787][T24118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.686953][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.694194][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.728585][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.735844][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.050916][T24511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.308771][T24515] nvme_fabrics: missing parameter 'transport=%s' [ 791.322571][T24515] nvme_fabrics: missing parameter 'nqn=%s' [ 791.461791][T24118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.166151][T24118] veth0_vlan: entered promiscuous mode [ 792.208707][T24118] veth1_vlan: entered promiscuous mode [ 792.306462][T24109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.569132][T24535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 792.586493][T24535] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 792.775865][T24535] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 792.794731][T24118] veth0_macvtap: entered promiscuous mode [ 792.819114][T24118] veth1_macvtap: entered promiscuous mode [ 792.946756][T24535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 792.954633][T24535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 793.074944][T24535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 793.156295][T24535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 793.173703][T24535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 793.240538][T24118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.263498][T24535] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 793.354733][T24118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.363801][T24535] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 793.369823][T24535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 793.463488][T24535] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 793.536336][T24118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.565193][T24540] syz.8.4762: attempt to access beyond end of device [ 793.565193][T24540] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 793.568193][T24118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.616586][T24118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.630810][T24118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.858243][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 793.922437][ T13] hsr_slave_0: left promiscuous mode [ 793.962526][ T13] hsr_slave_1: left promiscuous mode [ 793.972962][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.980439][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.030826][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.049358][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.146878][T24598] loop8: detected capacity change from 0 to 7 [ 794.174170][T24522] Dev loop8: unable to read RDB block 7 [ 794.187607][T24522] loop8: unable to read partition table [ 794.216458][T24522] loop8: partition table beyond EOD, truncated [ 794.248402][T24598] Dev loop8: unable to read RDB block 7 [ 794.255007][ T13] hsr_slave_0: left promiscuous mode [ 794.297377][T24598] loop8: unable to read partition table [ 794.326134][T24598] loop8: partition table beyond EOD, truncated [ 794.346381][ T13] hsr_slave_1: left promiscuous mode [ 794.364801][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.385304][T24604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.393207][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.412268][T24598] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 794.464277][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.502457][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.530562][T24601] loop6: detected capacity change from 0 to 524288000 [ 794.802500][ T13] hsr_slave_0: left promiscuous mode [ 794.839703][ T13] hsr_slave_1: left promiscuous mode [ 794.860483][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.911221][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.933136][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.940603][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.972404][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 795.132249][ T13] veth1_macvtap: left promiscuous mode [ 795.137861][ T13] veth0_macvtap: left promiscuous mode [ 795.162368][ T13] veth1_vlan: left promiscuous mode [ 795.168686][ T13] veth0_vlan: left promiscuous mode [ 795.212860][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 795.434281][ T13] veth1_macvtap: left promiscuous mode [ 795.439888][ T13] veth0_macvtap: left promiscuous mode [ 795.448165][ T13] veth1_vlan: left promiscuous mode [ 795.454628][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 795.472345][ T13] veth0_vlan: left promiscuous mode [ 795.643180][ T13] veth1_macvtap: left promiscuous mode [ 795.643261][ T13] veth0_macvtap: left promiscuous mode [ 795.643434][ T13] veth1_vlan: left promiscuous mode [ 795.644679][ T13] veth0_vlan: left promiscuous mode [ 795.725814][T24635] syz.8.4769: attempt to access beyond end of device [ 795.725814][T24635] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 795.938035][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 796.293075][T24649] random: crng reseeded on system resumption [ 796.591739][T24653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.062363][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 797.292566][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 797.532550][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 798.012377][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 798.104263][T24664] input: syz1 as /devices/virtual/input/input169 [ 798.453454][ T13] team0 (unregistering): Port device team_slave_1 removed [ 798.704084][ T13] team0 (unregistering): Port device team_slave_0 removed [ 799.091021][T24666] Falling back ldisc for ttynull. [ 799.132533][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 799.297335][T24674] misc userio: No port type given on /dev/userio [ 799.379836][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 799.612500][ T5836] Bluetooth: hci6: command 0x0c1a tx timeout [ 803.093561][ T13] team0 (unregistering): Port device team_slave_1 removed [ 803.342780][ T13] team0 (unregistering): Port device team_slave_0 removed [ 807.946562][ T13] team0 (unregistering): Port device team_slave_1 removed [ 808.233929][ T13] team0 (unregistering): Port device team_slave_0 removed [ 808.657144][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.664396][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.152931][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.161878][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 811.170331][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 811.179621][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 811.189692][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 811.572412][T24703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.205652][T24713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.271488][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 812.280977][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 812.289625][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.297650][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.306658][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.517867][T24695] chnl_net:caif_netlink_parms(): no params data found [ 812.756215][T24727] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 812.846237][T24732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.212257][ T5836] Bluetooth: hci0: command tx timeout [ 813.676301][T24695] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.676493][T24695] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.676680][T24695] bridge_slave_0: entered allmulticast mode [ 813.679775][T24695] bridge_slave_0: entered promiscuous mode [ 813.688012][T24739] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 813.695575][T24695] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.695707][T24695] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.695859][T24695] bridge_slave_1: entered allmulticast mode [ 813.701300][T24695] bridge_slave_1: entered promiscuous mode [ 814.203921][T24695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.243287][T24695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.419767][ T5836] Bluetooth: hci2: command tx timeout [ 814.469584][T24762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.618262][T24695] team0: Port device team_slave_0 added [ 814.659388][T24695] team0: Port device team_slave_1 added [ 815.063729][T24695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.070723][T24695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.128016][T24695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.158306][T24718] chnl_net:caif_netlink_parms(): no params data found [ 815.290543][T24695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.302560][T24695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.303119][ T5836] Bluetooth: hci0: command tx timeout [ 815.439405][T24695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.054494][T24695] hsr_slave_0: entered promiscuous mode [ 816.062023][T24695] hsr_slave_1: entered promiscuous mode [ 816.155171][T24803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.511039][ T5836] Bluetooth: hci2: command tx timeout [ 816.847249][T24813] ubi31: attaching mtd0 [ 816.854980][T24813] ubi31: scanning is finished [ 816.863103][T24813] ubi31: empty MTD device detected [ 817.007004][T24813] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 817.014875][T24813] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 817.026582][T24813] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 817.034009][T24813] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 817.041584][T24813] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 817.048859][T24813] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 817.061089][T24718] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.077071][T24718] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.084626][T24813] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 365932103 [ 817.101624][T24718] bridge_slave_0: entered allmulticast mode [ 817.115862][T24718] bridge_slave_0: entered promiscuous mode [ 817.122136][T24813] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 817.144357][T24718] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.151543][T24718] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.180697][T24824] ubi31: background thread "ubi_bgt31d" started, PID 24824 [ 817.212495][T24718] bridge_slave_1: entered allmulticast mode [ 817.220384][T24718] bridge_slave_1: entered promiscuous mode [ 817.372743][ T5836] Bluetooth: hci0: command tx timeout [ 817.940778][T24718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.975963][T24718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.388149][T24849] input: syz1 as /devices/virtual/input/input170 [ 818.420626][ T30] audit: type=1800 audit(1750323634.999:17): pid=24849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4809" name="dmabuf" dev="dmabuf" ino=26 res=0 errno=0 [ 818.572347][ T5836] Bluetooth: hci2: command tx timeout [ 819.290190][T24718] team0: Port device team_slave_0 added [ 819.348729][T24862] input: syz1 as /devices/virtual/input/input171 [ 819.452212][ T5836] Bluetooth: hci0: command tx timeout [ 819.684514][T24718] team0: Port device team_slave_1 added [ 819.855881][T14455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.285192][T14455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.357476][T24718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.367085][T24718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.396882][T24718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.540345][T14455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.609424][T24718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.620845][T24718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.654180][ T5836] Bluetooth: hci2: command tx timeout [ 820.655437][T24718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.835797][T14455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.891116][T24896] input: syz1 as /devices/virtual/input/input172 [ 821.208269][T24718] hsr_slave_0: entered promiscuous mode [ 821.217825][T24718] hsr_slave_1: entered promiscuous mode [ 821.224542][T24718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.236620][T24718] Cannot create hsr debugfs directory [ 821.883592][T24695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 822.098786][T24695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 822.280789][T24695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 822.366192][T24695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 822.437883][T14455] bridge_slave_1: left allmulticast mode [ 822.459848][T14455] bridge_slave_1: left promiscuous mode [ 822.486929][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.556003][T14455] bridge_slave_0: left allmulticast mode [ 822.564677][T14455] bridge_slave_0: left promiscuous mode [ 822.570486][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.645977][T14455] bridge_slave_1: left allmulticast mode [ 822.652364][T14455] bridge_slave_1: left promiscuous mode [ 822.658112][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.785372][T14455] bridge_slave_0: left allmulticast mode [ 822.791084][T14455] bridge_slave_0: left promiscuous mode [ 822.804160][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.074123][T14455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.186558][T14455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.250947][T14455] bond0 (unregistering): Released all slaves [ 826.713778][T14455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.814093][T14455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.884108][T14455] bond0 (unregistering): Released all slaves [ 827.475994][T14455] hsr_slave_0: left promiscuous mode [ 827.532559][T14455] hsr_slave_1: left promiscuous mode [ 827.540544][T14455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.548197][T14455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.613313][T14455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.643507][T14455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.982473][T14455] hsr_slave_0: left promiscuous mode [ 828.026857][T14455] hsr_slave_1: left promiscuous mode [ 828.038708][T14455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.179029][T14455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.250536][T25013] autofs4:pid:25013:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 828.264458][T25013] autofs4:pid:25013:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 828.298978][T14455] veth1_macvtap: left promiscuous mode [ 828.304758][T14455] veth0_macvtap: left promiscuous mode [ 828.310615][T14455] veth1_vlan: left promiscuous mode [ 828.316868][T14455] veth0_vlan: left promiscuous mode [ 828.535638][T25030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.018230][T25037] input: syz1 as /devices/virtual/input/input173 [ 830.724338][T14455] team0 (unregistering): Port device team_slave_1 removed [ 830.945010][T14455] team0 (unregistering): Port device team_slave_0 removed [ 834.273266][T14455] team0 (unregistering): Port device team_slave_1 removed [ 834.493686][T14455] team0 (unregistering): Port device team_slave_0 removed [ 837.830701][T24695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.876430][T24695] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.020953][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.028174][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.131386][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.138628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.558561][T24718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 838.644571][T24718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 838.845815][T24718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 838.938170][T24718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 838.972714][T25099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.201047][T24695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.534687][T25121] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 839.574164][T24718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.662809][T24718] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.687466][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.694698][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.857127][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.864382][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.080546][T24695] veth0_vlan: entered promiscuous mode [ 840.116077][T24695] veth1_vlan: entered promiscuous mode [ 840.193786][T24695] veth0_macvtap: entered promiscuous mode [ 840.224373][T24695] veth1_macvtap: entered promiscuous mode [ 840.241079][T25138] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 840.289955][T24695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.339630][T24695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.368076][T24695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.400015][T24695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.441822][T24695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.464206][T24695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.547776][T24718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.941937][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.970312][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.978519][T24718] veth0_vlan: entered promiscuous mode [ 841.021905][T24718] veth1_vlan: entered promiscuous mode [ 841.118459][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.151076][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.224835][T24718] veth0_macvtap: entered promiscuous mode [ 841.281095][T24718] veth1_macvtap: entered promiscuous mode [ 841.321940][T24718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.388264][T24718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.420467][T24718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.442173][T24718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.462290][T24718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.482486][T24718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.579335][T25159] loop6: detected capacity change from 0 to 524287999 [ 841.593726][T25053] buffer_io_error: 11 callbacks suppressed [ 841.593744][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.621963][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.633843][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.672838][T25163] Invalid logical block size (7) [ 841.688740][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.712304][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.729037][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.740603][T14455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.765046][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.774131][T14455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.792239][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.800168][T25053] ldm_validate_partition_table(): Disk read failed. [ 841.815060][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.828685][T25053] Buffer I/O error on dev loop6, logical block 0, async page read [ 841.837055][T14455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.845450][T14455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.861824][T25053] Dev loop6: unable to read RDB block 0 [ 841.875467][T25053] loop6: unable to read partition table [ 843.041931][T25220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.353720][T25231] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 843.407408][T25231] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 843.426439][T25232] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 843.999924][T25257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.057378][T25288] rtc_cmos 00:00: Alarms can be up to one day in the future [ 845.368810][T25287] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.291264][ T5887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.299353][ T5887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.330968][ T5887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.376471][ T5887] rtc_cmos 00:00: Alarms can be up to one day in the future [ 846.407969][ T5887] rtc rtc0: __rtc_set_alarm: err=-22 [ 847.131837][T25337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.404372][T25349] input: syz1 as /devices/virtual/input/input174 [ 847.437413][T25349] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 849.253950][T25416] loop8: detected capacity change from 0 to 7 [ 849.302369][T25416] Dev loop8: unable to read RDB block 7 [ 849.308034][T25416] loop8: unable to read partition table [ 849.362593][T25416] loop8: partition table beyond EOD, truncated [ 849.392150][T25416] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 850.928016][T25467] loop8: detected capacity change from 0 to 7 [ 850.972355][T25467] Dev loop8: unable to read RDB block 7 [ 850.977995][T25467] loop8: unable to read partition table [ 851.006189][T25467] loop8: partition table beyond EOD, truncated [ 851.037193][T25467] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 851.551689][T25494] blktrace: Concurrent blktraces are not allowed on sg0 [ 851.562879][T25497] tun0: tun_chr_ioctl cmd 1074025675 [ 851.572321][T25497] tun0: persist enabled [ 851.582595][T25497] tun0: tun_chr_ioctl cmd 1074025675 [ 851.588007][T25497] tun0: persist enabled [ 852.780287][T25546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.805651][T25545] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 852.871203][T25550] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 853.473136][T25564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.084393][T25581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.901793][T25604] cgroup: fork rejected by pids controller in /syz9 [ 855.162794][T25715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 857.052168][ T30] audit: type=1400 audit(1750323673.629:18): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=25762 comm="syz.7.4951" [ 857.095387][T25766] CUSE: info not properly terminated [ 857.527424][ T1149] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.861620][T25782] input: syz1 as /devices/virtual/input/input177 [ 857.940532][T25781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.088670][ T1149] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.337462][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.352046][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.360197][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.374584][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.382691][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.587850][ T1149] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.964907][ T1149] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.475974][ T1149] bridge_slave_1: left allmulticast mode [ 859.481916][ T1149] bridge_slave_1: left promiscuous mode [ 859.488135][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.586597][ T1149] bridge_slave_0: left allmulticast mode [ 859.595685][ T1149] bridge_slave_0: left promiscuous mode [ 859.601486][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.412291][ T5847] Bluetooth: hci0: command tx timeout [ 861.583186][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.664829][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.724437][ T1149] bond0 (unregistering): Released all slaves [ 861.771382][T25791] chnl_net:caif_netlink_parms(): no params data found [ 862.492287][ T5847] Bluetooth: hci0: command tx timeout [ 862.516019][T25791] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.523858][T25791] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.531355][T25791] bridge_slave_0: entered allmulticast mode [ 862.559682][T25791] bridge_slave_0: entered promiscuous mode [ 862.588581][T25791] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.600004][T25791] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.616430][T25791] bridge_slave_1: entered allmulticast mode [ 862.639815][T25855] kvm: user requested TSC rate below hardware speed [ 862.648733][T25791] bridge_slave_1: entered promiscuous mode [ 862.677600][T25855] binder: 25852:25855 ioctl c0306201 200000000100 returned -14 [ 862.688332][T25855] binder: 25852:25855 ioctl d000943d 20000011b200 returned -22 [ 863.008362][T25866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.329493][T25791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.417817][T25791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.826349][ T1149] hsr_slave_0: left promiscuous mode [ 863.862677][ T1149] hsr_slave_1: left promiscuous mode [ 863.868910][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.886387][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.966060][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.983968][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.100991][ T1149] veth1_macvtap: left promiscuous mode [ 864.110561][ T1149] veth0_macvtap: left promiscuous mode [ 864.118607][ T1149] veth1_vlan: left promiscuous mode [ 864.127186][ T1149] veth0_vlan: left promiscuous mode [ 864.572556][ T5847] Bluetooth: hci0: command tx timeout [ 865.079532][T25914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.495163][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 866.652682][ T5836] Bluetooth: hci0: command tx timeout [ 866.743451][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 867.133308][ T5836] Bluetooth: hci3: command 0xfc11 tx timeout [ 867.133397][ T5847] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 869.331467][T25791] team0: Port device team_slave_0 added [ 869.588349][T25791] team0: Port device team_slave_1 added [ 869.913976][T25791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.920985][T25791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.946963][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.948568][T25934] input: syz1 as /devices/virtual/input/input178 [ 869.995549][T25791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.046441][T25791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.062424][T25791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.105678][T25791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.125993][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.135871][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.227868][T25938] input: syz1 as /devices/virtual/input/input179 [ 870.464701][T25791] hsr_slave_0: entered promiscuous mode [ 870.471382][T25791] hsr_slave_1: entered promiscuous mode [ 872.494696][T25791] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 872.580258][T25791] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 872.665111][T25791] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 872.740406][T25791] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 872.894456][T26010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.120230][T25791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.177740][T25791] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.231825][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.239111][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.251884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.259181][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.834964][T25791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.881177][T26034] sp0: Synchronizing with TNC [ 874.719578][T25791] veth0_vlan: entered promiscuous mode [ 874.755674][T25791] veth1_vlan: entered promiscuous mode [ 874.911924][T25791] veth0_macvtap: entered promiscuous mode [ 874.946902][T25791] veth1_macvtap: entered promiscuous mode [ 875.050727][T25791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.080207][T25791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.124650][T25791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.145485][T25791] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.158776][T25791] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.192010][T25791] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.571349][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.601839][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.717397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.751592][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.578129][T26104] i2c i2c-0: Invalid block write size 254 [ 877.601227][T26138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.944571][T26153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.138634][T26159] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 878.259081][T26168] hub 6-0:1.0: USB hub found [ 878.259433][T26168] hub 6-0:1.0: 1 port detected [ 878.820415][ T30] audit: type=1400 audit(1750323695.389:19): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26181 comm="syz.8.5040" [ 880.465612][T26241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.058427][ T30] audit: type=1400 audit(1750323697.639:20): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=26263 comm="syz.9.5057" [ 883.582114][T26343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.338186][T26363] vivid-000: disconnect [ 884.470297][T26362] vivid-000: reconnect [ 884.563392][T26369] loop8: detected capacity change from 0 to 7 [ 884.590324][T26369] Dev loop8: unable to read RDB block 7 [ 884.615495][T26369] loop8: unable to read partition table [ 884.628827][T26369] loop8: partition table beyond EOD, truncated [ 884.645371][T26369] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 884.840845][T26382] [U] ^R [ 884.874305][T26382] usb usb8: usbfs: process 26382 (syz.7.5079) did not claim interface 0 before use [ 884.891318][ T30] audit: type=1400 audit(1750323701.469:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=26380 comm="syz.7.5079" [ 885.388844][T26411] loop8: detected capacity change from 0 to 7 [ 885.421995][T26411] Dev loop8: unable to read RDB block 7 [ 885.435382][T26411] loop8: unable to read partition table [ 885.441294][T26411] loop8: partition table beyond EOD, truncated [ 885.525733][T26411] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 885.680355][ T30] audit: type=1400 audit(1750323702.259:22): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=26416 comm="syz.8.5090" [ 885.712466][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.573468][T26450] QAT: Device 253 not found [ 886.870100][T26462] loop8: detected capacity change from 0 to 7 [ 886.923047][T26462] Dev loop8: unable to read RDB block 7 [ 886.942484][T26462] loop8: unable to read partition table [ 886.948428][T26462] loop8: partition table beyond EOD, truncated [ 887.004258][T26466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 887.022168][T26462] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 888.024325][T26499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 888.103088][T26499] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 888.178709][T26499] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 888.484079][T26516] loop8: detected capacity change from 0 to 7 [ 888.497755][T26054] Dev loop8: unable to read RDB block 7 [ 888.516249][T26054] loop8: unable to read partition table [ 888.534984][T26054] loop8: partition table beyond EOD, truncated [ 888.543164][T26516] Dev loop8: unable to read RDB block 7 [ 888.560048][T26516] loop8: unable to read partition table [ 888.577000][T26516] loop8: partition table beyond EOD, truncated [ 888.584844][T26516] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 889.540211][T26544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.633181][T26544] program syz.9.5115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.923591][T26562] loop8: detected capacity change from 0 to 7 [ 890.007350][T26562] Dev loop8: unable to read RDB block 7 [ 890.021681][T26562] loop8: unable to read partition table [ 890.043958][T26562] loop8: partition table beyond EOD, truncated [ 890.053836][T26562] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 890.361006][T26572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 890.399504][T26572] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 891.910963][T26625] loop8: detected capacity change from 0 to 7 [ 891.933245][T26625] Dev loop8: unable to read RDB block 7 [ 891.938909][T26625] loop8: unable to read partition table [ 891.974680][T26629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.984803][T26625] loop8: partition table beyond EOD, truncated [ 892.004379][T26625] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 894.031486][T26681] can0: slcan on ptm0. [ 894.081536][T26693] sp0: Synchronizing with TNC [ 894.123182][T26693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.265569][T26675] can0 (unregistered): slcan off ptm0. [ 894.453217][T26707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.478401][T26706] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 894.577505][T26709] loop8: detected capacity change from 0 to 7 [ 894.665999][T26054] Dev loop8: unable to read RDB block 7 [ 894.681967][T26054] loop8: unable to read partition table [ 894.703952][T26054] loop8: partition table beyond EOD, truncated [ 894.731876][T26709] Dev loop8: unable to read RDB block 7 [ 894.747395][T26709] loop8: unable to read partition table [ 894.776532][T26709] loop8: partition table beyond EOD, truncated [ 894.792747][T26709] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 895.286740][T26731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.884904][T26748] input: syz0 as /devices/virtual/input/input182 [ 895.954058][T26754] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 896.582851][T26774] syz.9.5159: attempt to access beyond end of device [ 896.582851][T26774] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 898.123166][T26808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 898.145140][T26808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 898.151771][T26808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 898.158200][T26808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 898.243880][T26808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 898.325782][T26808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 898.331875][T26808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 898.445454][T26808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 898.700160][T26848] program syz.1.5169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.710784][T26819] CUSE: info not properly terminated [ 898.969067][T26858] tun0: tun_chr_ioctl cmd 1074025676 [ 899.004513][T26858] tun0: owner set to 0 [ 899.380332][T26869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.416551][T26869] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 900.102770][T26893] ALSA: seq fatal error: cannot create timer (-22) [ 900.152873][T26893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.172546][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 900.179398][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 900.186617][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 900.332319][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 902.253012][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 902.416874][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 903.179325][T27009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.332378][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.430042][T27058] random: crng reseeded on system resumption [ 904.474658][T27058] Unrecognized hibernate image header format! [ 904.496044][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.503980][T27058] PM: hibernation: Image mismatch: architecture specific data [ 904.677037][T27074] loop8: detected capacity change from 0 to 7 [ 904.706651][ T5208] Dev loop8: unable to read RDB block 7 [ 904.726669][ T5208] loop8: unable to read partition table [ 904.747260][ T5208] loop8: partition table beyond EOD, truncated [ 904.795317][T27074] Dev loop8: unable to read RDB block 7 [ 904.812373][T27074] loop8: unable to read partition table [ 904.841543][T27074] loop8: partition table beyond EOD, truncated [ 904.862164][T27074] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 904.886852][ T5208] Dev loop8: unable to read RDB block 7 [ 904.904388][ T5208] loop8: unable to read partition table [ 904.924175][ T5208] loop8: partition table beyond EOD, truncated [ 905.735356][T27113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.755678][T27114] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 906.455916][T27145] usb usb1: usbfs: process 27145 (syz.7.5215) did not claim interface 7 before use [ 906.517807][T27149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.685102][T27156] loop8: detected capacity change from 0 to 7 [ 906.717659][T27156] Dev loop8: unable to read RDB block 7 [ 906.731244][T27156] loop8: unable to read partition table [ 906.752405][T27156] loop8: partition table beyond EOD, truncated [ 906.770010][T27156] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 908.120264][T27203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.415269][T27218] loop8: detected capacity change from 0 to 7 [ 908.491543][T27218] Dev loop8: unable to read RDB block 7 [ 908.542312][T27218] loop8: unable to read partition table [ 908.548376][T27218] loop8: partition table beyond EOD, truncated [ 908.582540][T27218] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 910.313209][T27285] loop8: detected capacity change from 0 to 7 [ 910.335823][T27285] Dev loop8: unable to read RDB block 7 [ 910.373965][T27285] loop8: unable to read partition table [ 910.387143][T27285] loop8: partition table beyond EOD, truncated [ 910.402206][T27285] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 911.464431][T27338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 912.696662][T27395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.129422][T27409] QAT: Invalid ioctl -1072131211 [ 914.068857][T27445] syz.1.5258: attempt to access beyond end of device [ 914.068857][T27445] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 915.687658][T27476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 915.699054][T27476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.709323][T27476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.719325][T27504] loop8: detected capacity change from 0 to 7 [ 915.719412][T27476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 915.762250][T27504] Dev loop8: unable to read RDB block 7 [ 915.782644][T27504] loop8: unable to read partition table [ 915.792684][T27504] loop8: partition table beyond EOD, truncated [ 915.815315][T27504] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 915.977513][T27519] CUSE: info not properly terminated [ 916.169783][T27524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.682676][T27548] syz.8.5276: attempt to access beyond end of device [ 916.682676][T27548] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 916.743198][T27554] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 916.778798][T27555] input: syz1 as /devices/virtual/input/input184 [ 916.990783][T27567] loop8: detected capacity change from 0 to 7 [ 917.000581][T27567] Dev loop8: unable to read RDB block 7 [ 917.023638][T27567] loop8: unable to read partition table [ 917.078102][T27567] loop8: partition table beyond EOD, truncated [ 917.092638][T27567] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 917.218366][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 917.302613][T27592] random: crng reseeded on system resumption [ 917.801645][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 917.811772][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 917.817909][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 918.027478][T27623] program syz.9.5287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.950965][T27657] loop8: detected capacity change from 0 to 7 [ 918.963446][T27657] Dev loop8: unable to read RDB block 7 [ 918.969594][T27657] loop8: unable to read partition table [ 918.979473][T27657] loop8: partition table beyond EOD, truncated [ 918.986328][T27657] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 919.184922][T27668] input: syz0 as /devices/virtual/input/input185 [ 920.610439][T27733] loop8: detected capacity change from 0 to 7 [ 920.635032][T26054] Dev loop8: unable to read RDB block 7 [ 920.661068][T26054] loop8: unable to read partition table [ 920.678601][T26054] loop8: partition table beyond EOD, truncated [ 920.696664][T27733] Dev loop8: unable to read RDB block 7 [ 920.732126][T27733] loop8: unable to read partition table [ 920.767412][T27733] loop8: partition table beyond EOD, truncated [ 920.802248][T27733] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 921.721408][T27783] loop8: detected capacity change from 0 to 7 [ 921.741165][T27783] Dev loop8: unable to read RDB block 7 [ 921.771052][T27783] loop8: unable to read partition table [ 921.777509][T27783] loop8: partition table beyond EOD, truncated [ 921.796401][T27783] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 922.689187][T27830] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 923.508706][T27864] loop8: detected capacity change from 0 to 7 [ 923.517819][T27864] Dev loop8: unable to read RDB block 7 [ 923.532232][T27864] loop8: unable to read partition table [ 923.556057][T27864] loop8: partition table beyond EOD, truncated [ 923.582149][T27864] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 924.094582][T27883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.326978][T27903] hub 6-0:1.0: USB hub found [ 924.345712][T27903] hub 6-0:1.0: 1 port detected [ 924.625475][T27910] input: syz0 as /devices/virtual/input/input186 [ 925.126671][T27928] ALSA: seq fatal error: cannot create timer (-22) [ 926.868320][T27980] input: syz0 as /devices/virtual/input/input188 [ 927.728168][T27980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 927.742614][T27980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 927.756594][T27980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.770527][T27980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 928.134303][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.175533][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.213576][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.221041][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.243942][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.290293][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.302398][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.328186][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.349585][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.367525][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.391377][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.422096][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.437619][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.460129][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.483014][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.511588][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.531058][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.545939][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.554468][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.562778][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.570423][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.582541][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.629026][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.654962][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.677870][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.702685][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.729612][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.750717][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.778582][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.806572][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.851099][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.879651][ T5842] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 928.917607][ T5842] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.972218][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.174891][T28083] fido_id[28083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 929.349049][T28093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.772563][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 929.778685][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 929.782433][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 931.390204][T28179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.541765][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.548400][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.659568][T28195] usb usb1: usbfs: process 28195 (syz.8.5373) did not claim interface 0 before use [ 931.694431][T28195] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 931.887634][T28198] usb usb1: usbfs: process 28198 (syz.9.5375) did not claim interface 6 before use [ 932.531319][T28217] loop8: detected capacity change from 0 to 7 [ 932.539285][T28217] Dev loop8: unable to read RDB block 7 [ 932.551445][T28217] loop8: unable to read partition table [ 932.558335][T28217] loop8: partition table beyond EOD, truncated [ 932.580979][T28217] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 932.759851][T28232] blktrace: Concurrent blktraces are not allowed on sg0 [ 932.813218][T28232] relay: one or more items not logged [item size (48) > sub-buffer size (6)] [ 932.885470][T28236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.100971][T28247] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 933.202219][T28250] tun0: tun_chr_ioctl cmd 1074025675 [ 933.207783][T28250] tun0: persist disabled [ 933.821410][T28286] loop8: detected capacity change from 0 to 7 [ 933.845206][T26054] Dev loop8: unable to read RDB block 7 [ 933.857180][T26054] loop8: unable to read partition table [ 933.866935][T26054] loop8: partition table beyond EOD, truncated [ 933.885524][T28286] Dev loop8: unable to read RDB block 7 [ 933.891257][T28286] loop8: unable to read partition table [ 933.906135][T28286] loop8: partition table beyond EOD, truncated [ 933.947739][T28286] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 935.123810][T28367] loop8: detected capacity change from 0 to 231 [ 935.679005][T28393] loop8: detected capacity change from 0 to 7 [ 935.697347][T28393] Dev loop8: unable to read RDB block 7 [ 935.709785][T28393] loop8: unable to read partition table [ 935.720067][T28393] loop8: partition table beyond EOD, truncated [ 935.736632][T28393] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 936.572429][T28428] input: syz1 as /devices/virtual/input/input191 [ 937.490056][T28471] loop8: detected capacity change from 0 to 7 [ 937.500411][T26054] Dev loop8: unable to read RDB block 7 [ 937.510808][T26054] loop8: unable to read partition table [ 937.517081][T26054] loop8: partition table beyond EOD, truncated [ 937.526735][T28471] Dev loop8: unable to read RDB block 7 [ 937.540092][T28471] loop8: unable to read partition table [ 937.547301][T28471] loop8: partition table beyond EOD, truncated [ 937.560384][T28471] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 938.575089][T28499] random: crng reseeded on system resumption [ 938.614797][T28499] Restarting kernel threads ... [ 938.624735][T28499] Done restarting kernel threads. [ 938.920728][T28517] vivid-000: ================= START STATUS ================= [ 938.953714][T28517] vivid-000: Test Pattern: 75% Colorbar [ 938.987370][T28517] vivid-000: Fill Percentage of Frame: 4 [ 939.017052][T28517] vivid-000: Horizontal Movement: No Movement [ 939.044598][T28517] vivid-000: Vertical Movement: Move Up Slow [ 939.065742][T28517] vivid-000: OSD Text Mode: Counters Only [ 939.087253][T28517] vivid-000: Show Border: false [ 939.107202][T28517] vivid-000: Show Square: true [ 939.124405][T28517] vivid-000: Sensor Flipped Horizontally: false [ 939.152087][T28517] vivid-000: Sensor Flipped Vertically: true [ 939.168604][T28517] vivid-000: Insert SAV Code in Image: false [ 939.188226][T28517] vivid-000: Insert EAV Code in Image: true [ 939.188276][T28517] vivid-000: Insert Video Guard Band: true [ 939.188303][T28517] vivid-000: Reduced Framerate: true [ 939.188327][T28517] vivid-000: HDMI 000-0 Is Connected To: None [ 939.188352][T28517] vivid-000: S-Video 000-0 Is Connected To: None [ 939.188378][T28517] vivid-000: Enable Capture Cropping: false grabbed [ 939.188421][T28517] vivid-000: Enable Capture Composing: true grabbed [ 939.188449][T28517] vivid-000: Enable Capture Scaler: true grabbed [ 939.188478][T28517] vivid-000: Timestamp Source: End of Frame [ 939.188501][T28517] vivid-000: Colorspace: Rec. 709 [ 939.188530][T28517] vivid-000: Transfer Function: sRGB [ 939.188552][T28517] vivid-000: Y'CbCr Encoding: Default [ 939.188574][T28517] vivid-000: HSV Encoding: Hue 0-256 [ 939.188597][T28517] vivid-000: Quantization: Limited Range [ 939.188620][T28517] vivid-000: Apply Alpha To Red Only: false [ 939.188642][T28517] vivid-000: Standard Aspect Ratio: 14x9 [ 939.188665][T28517] vivid-000: DV Timings Signal Mode: Current DV Timings [ 939.188688][T28517] vivid-000: DV Timings: 640x480p59 inactive [ 939.188717][T28517] vivid-000: DV Timings Aspect Ratio: 14x9 [ 939.188739][T28517] vivid-000: Maximum EDID Blocks: 1 [ 939.188762][T28517] vivid-000: Limited RGB Range (16-235): true [ 939.188785][T28517] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 939.188808][T28517] vivid-000: Power Present: 0x00000000 [ 939.188833][T28517] tpg source WxH: 1280x720 (R'G'B) [ 939.188848][T28517] tpg field: 1 [ 939.188857][T28517] tpg crop: (0,0)/1280x720 [ 939.188870][T28517] tpg compose: (0,0)/16x16 [ 939.188884][T28517] tpg colorspace: 9 [ 939.188893][T28517] tpg transfer function: 7/7 [ 939.188904][T28517] tpg quantization: 2/2 [ 939.188915][T28517] tpg RGB range: 2/1 [ 939.188926][T28517] vivid-000: ================== END STATUS ================== [ 939.430372][T28534] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 939.541768][T28538] loop8: detected capacity change from 0 to 7 [ 939.688583][T26054] Dev loop8: unable to read RDB block 7 [ 939.697116][T26054] loop8: unable to read partition table [ 939.707453][T26054] loop8: partition table beyond EOD, truncated [ 939.718796][T28538] Dev loop8: unable to read RDB block 7 [ 939.725953][T28538] loop8: unable to read partition table [ 939.745798][T28538] loop8: partition table beyond EOD, truncated [ 939.759403][T28538] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 941.228907][T28606] loop8: detected capacity change from 0 to 7 [ 941.248443][T28606] Dev loop8: unable to read RDB block 7 [ 941.268869][T28606] loop8: unable to read partition table [ 941.310543][T28606] loop8: partition table beyond EOD, truncated [ 941.329950][T28606] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 942.712681][T28661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.910273][T28710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.919165][T28707] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 944.078440][T28719] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 944.423905][T28683] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 944.434531][T28683] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 944.696836][T28760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 944.944816][T28683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 944.960624][T28683] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 944.983473][T28785] program syz.7.5450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.037666][T28788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.440659][T28683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 945.455836][T28683] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 945.729859][T28813] CUSE: info not properly terminated [ 945.807903][T28683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 945.826749][T28683] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 945.851076][T28819] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 947.439467][T28872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.373329][T28920] program syz.9.5469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.518170][T28928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 953.499574][T29011] loop8: detected capacity change from 0 to 7 [ 953.521500][T29012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 953.530663][T29011] Dev loop8: unable to read RDB block 7 [ 953.551975][T29011] loop8: unable to read partition table [ 953.580736][T29011] loop8: partition table beyond EOD, truncated [ 953.592986][T29011] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 953.623868][T29015] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 953.685046][T29023] nvme_fabrics: missing parameter 'transport=%s' [ 953.709319][T29023] nvme_fabrics: missing parameter 'nqn=%s' [ 954.259469][T29065] sp0: Synchronizing with TNC [ 954.517838][T29089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.822991][T29100] syz.1.5489: attempt to access beyond end of device [ 954.822991][T29100] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 955.732345][T29139] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 955.848157][T29149] loop8: detected capacity change from 0 to 7 [ 955.876378][T29149] Dev loop8: unable to read RDB block 7 [ 955.883197][T29149] loop8: unable to read partition table [ 955.889488][T29149] loop8: partition table beyond EOD, truncated [ 955.899409][T29149] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 955.992774][T29157] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 956.556221][T29174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.190393][T29215] loop8: detected capacity change from 0 to 7 [ 957.198070][T29215] Dev loop8: unable to read RDB block 7 [ 957.208776][T29215] loop8: unable to read partition table [ 957.215017][T29215] loop8: partition table beyond EOD, truncated [ 957.221334][T29215] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 957.808768][T29245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 957.823459][T29245] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 958.034295][T29259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.453916][T29327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.490534][T29330] input: syz1 as /devices/virtual/input/input193 [ 963.577341][T29361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.222515][T29443] loop8: detected capacity change from 0 to 7 [ 965.241025][T29443] Dev loop8: unable to read RDB block 7 [ 965.255610][T29443] loop8: unable to read partition table [ 965.261973][T29443] loop8: partition table beyond EOD, truncated [ 965.284122][T29443] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 965.789737][T29468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.327908][T29500] loop8: detected capacity change from 0 to 7 [ 966.337040][T29500] Dev loop8: unable to read RDB block 7 [ 966.346280][T29500] loop8: unable to read partition table [ 966.355276][T29500] loop8: partition table beyond EOD, truncated [ 966.373694][T29500] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 966.391642][ T5208] Dev loop8: unable to read RDB block 7 [ 966.399772][ T5208] loop8: unable to read partition table [ 966.408680][ T5208] loop8: partition table beyond EOD, truncated [ 967.153678][T29538] loop8: detected capacity change from 0 to 7 [ 967.164960][T29538] Dev loop8: unable to read RDB block 7 [ 967.195974][T29538] loop8: unable to read partition table [ 967.202306][T29538] loop8: partition table beyond EOD, truncated [ 967.212187][T29538] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 967.504112][T29555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.189977][T29580] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 968.225457][T14455] Bluetooth: hci3: Frame reassembly failed (-84) [ 968.571795][T29607] loop8: detected capacity change from 0 to 7 [ 968.587950][T29332] Dev loop8: unable to read RDB block 7 [ 968.594876][T29332] loop8: unable to read partition table [ 968.612930][T29332] loop8: partition table beyond EOD, truncated [ 968.629840][T29607] Dev loop8: unable to read RDB block 7 [ 968.644998][T29607] loop8: unable to read partition table [ 968.651162][T29607] loop8: partition table beyond EOD, truncated [ 968.660562][T29607] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 969.954393][T29668] loop8: detected capacity change from 0 to 7 [ 969.964581][T29332] Dev loop8: unable to read RDB block 7 [ 969.970321][T29332] loop8: unable to read partition table [ 969.978572][T29332] loop8: partition table beyond EOD, truncated [ 969.996217][T29668] Dev loop8: unable to read RDB block 7 [ 970.001969][T29668] loop8: unable to read partition table [ 970.008400][T29668] loop8: partition table beyond EOD, truncated [ 970.019648][T29668] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 970.252352][ T5158] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 971.369995][T29723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 971.561772][T29731] input: syz1 as /devices/virtual/input/input194 [ 971.649725][T29739] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 971.672283][T29740] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 972.521036][T29767] loop8: detected capacity change from 0 to 7 [ 972.568172][T29767] Dev loop8: unable to read RDB block 7 [ 972.588554][T29767] loop8: unable to read partition table [ 972.602322][T29767] loop8: partition table beyond EOD, truncated [ 972.622364][T29767] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 972.790040][T29775] Invalid logical block size (1025) [ 972.800022][T29777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.900398][T29822] loop8: detected capacity change from 0 to 7 [ 973.911846][T29822] Dev loop8: unable to read RDB block 7 [ 973.921059][T29822] loop8: unable to read partition table [ 973.928127][T29822] loop8: partition table beyond EOD, truncated [ 973.941717][T29822] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 974.390356][T29841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.735920][T29861] input: syz1 as /devices/virtual/input/input195 [ 975.514317][T29886] loop8: detected capacity change from 0 to 7 [ 975.567474][T29332] Dev loop8: unable to read RDB block 7 [ 975.582153][T29332] loop8: unable to read partition table [ 975.599500][T29332] loop8: partition table beyond EOD, truncated [ 975.620362][T29886] Dev loop8: unable to read RDB block 7 [ 975.640423][T29886] loop8: unable to read partition table [ 975.662784][T29886] loop8: partition table beyond EOD, truncated [ 975.760620][T29886] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 977.789855][T30098] syz.7.5637: attempt to access beyond end of device [ 977.789855][T30098] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 977.924585][T30108] loop8: detected capacity change from 0 to 7 [ 977.936445][T29332] Dev loop8: unable to read RDB block 7 [ 977.945742][T29332] loop8: unable to read partition table [ 977.951650][T29332] loop8: partition table beyond EOD, truncated [ 977.964341][T30108] Dev loop8: unable to read RDB block 7 [ 977.970113][T30108] loop8: unable to read partition table [ 977.980459][T30108] loop8: partition table beyond EOD, truncated [ 977.987743][T30108] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 979.288988][T30158] loop8: detected capacity change from 0 to 7 [ 979.306177][T29332] Dev loop8: unable to read RDB block 7 [ 979.311845][T29332] loop8: unable to read partition table [ 979.321831][T29332] loop8: partition table beyond EOD, truncated [ 979.330961][T30158] Dev loop8: unable to read RDB block 7 [ 979.341337][T30158] loop8: unable to read partition table [ 979.356916][T30158] loop8: partition table beyond EOD, truncated [ 979.395944][T30158] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 980.245807][T30203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.131669][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.173161][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.196330][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.216165][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.247087][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.280868][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.315780][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.334779][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.355785][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.379443][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.399067][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.423730][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.432572][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.440101][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.468324][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.486913][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.523275][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.532993][T30300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.551169][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.559644][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.580797][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.599549][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.612095][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.629782][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.637532][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.652141][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.668188][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.704376][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.816413][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.831361][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.846653][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.862092][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.878622][T24472] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 982.906300][T24472] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 983.367370][T30330] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 983.440806][T30334] loop8: detected capacity change from 0 to 7 [ 983.449225][T30334] Dev loop8: unable to read RDB block 7 [ 983.457954][T30334] loop8: unable to read partition table [ 983.465443][T30334] loop8: partition table beyond EOD, truncated [ 983.472006][T30334] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 983.483460][ T5208] Dev loop8: unable to read RDB block 7 [ 983.489146][ T5208] loop8: unable to read partition table [ 983.496680][ T5208] loop8: partition table beyond EOD, truncated [ 983.595038][T30322] [U]  [ 983.846654][T30363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.212245][T30386] QAT: Stopping all acceleration devices. [ 984.654346][T30398] loop8: detected capacity change from 0 to 7 [ 984.684966][T29332] Dev loop8: unable to read RDB block 7 [ 984.696728][T29332] loop8: unable to read partition table [ 984.717031][T29332] loop8: partition table beyond EOD, truncated [ 984.764498][T30398] Dev loop8: unable to read RDB block 7 [ 984.780525][T30398] loop8: unable to read partition table [ 984.802657][T30398] loop8: partition table beyond EOD, truncated [ 984.808897][T30398] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 985.323783][T30414] sp0: Synchronizing with TNC [ 985.719865][T30456] loop8: detected capacity change from 0 to 7 [ 985.737372][T24099] Dev loop8: unable to read RDB block 7 [ 985.756978][T24099] loop8: unable to read partition table [ 985.770279][T24099] loop8: partition table beyond EOD, truncated [ 985.785647][T30456] Dev loop8: unable to read RDB block 7 [ 985.791332][T30456] loop8: unable to read partition table [ 985.797593][T30456] loop8: partition table beyond EOD, truncated [ 985.818832][T30456] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 986.289236][T30494] input: syz1 as /devices/virtual/input/input196 [ 987.606210][T30636] input: syz1 as /devices/virtual/input/input197 [ 988.763482][T30685] mkiss: ax0: crc mode is auto. [ 989.534879][T30711] loop6: detected capacity change from 0 to 63 [ 989.564685][T29332] buffer_io_error: 7 callbacks suppressed [ 989.564703][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.599022][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.616338][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.635332][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.647442][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.665957][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.686241][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.714806][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.723379][T29332] ldm_validate_partition_table(): Disk read failed. [ 989.730039][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.739204][T29332] Buffer I/O error on dev loop6, logical block 0, async page read [ 989.747601][T29332] Dev loop6: unable to read RDB block 0 [ 989.753961][T29332] loop6: unable to read partition table [ 989.761351][T30711] ldm_validate_partition_table(): Disk read failed. [ 989.770733][T30711] Dev loop6: unable to read RDB block 0 [ 989.778079][T30711] loop6: unable to read partition table [ 989.794060][T30711] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 989.806120][ T5208] ldm_validate_partition_table(): Disk read failed. [ 989.813613][ T5208] Dev loop6: unable to read RDB block 0 [ 989.820061][ T5208] loop6: unable to read partition table [ 990.838414][T30740] loop8: detected capacity change from 0 to 7 [ 990.846296][T29332] Dev loop8: unable to read RDB block 7 [ 990.846347][T29332] loop8: unable to read partition table [ 990.846551][T29332] loop8: partition table beyond EOD, truncated [ 990.854090][T30740] Dev loop8: unable to read RDB block 7 [ 990.854134][T30740] loop8: unable to read partition table [ 990.854325][T30740] loop8: partition table beyond EOD, truncated [ 990.854354][T30740] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 991.341673][T30759] loop8: detected capacity change from 0 to 7 [ 991.359529][T29332] Dev loop8: unable to read RDB block 7 [ 991.367818][T29332] loop8: unable to read partition table [ 991.377699][T29332] loop8: partition table beyond EOD, truncated [ 991.391229][T30759] Dev loop8: unable to read RDB block 7 [ 991.401871][T30759] loop8: unable to read partition table [ 991.415552][T30759] loop8: partition table beyond EOD, truncated [ 991.426277][T30759] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 991.453097][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 992.681575][T30801] usb usb8: usbfs: process 30801 (syz.1.5743) did not claim interface 32 before use [ 992.980784][T30815] loop8: detected capacity change from 0 to 7 [ 992.983955][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.995411][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.003524][T30815] Dev loop8: unable to read RDB block 7 [ 993.009987][T30815] loop8: unable to read partition table [ 993.017388][T30815] loop8: partition table beyond EOD, truncated [ 993.024001][T30815] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 994.210582][T30871] tap0: tun_chr_ioctl cmd 1074025678 [ 994.227827][T30871] tap0: group set to 0 [ 994.794842][T30902] loop8: detected capacity change from 0 to 7 [ 994.808287][T29332] Dev loop8: unable to read RDB block 7 [ 994.814567][T29332] loop8: unable to read partition table [ 994.820644][T29332] loop8: partition table beyond EOD, truncated [ 994.831914][T30902] Dev loop8: unable to read RDB block 7 [ 994.841341][T30902] loop8: unable to read partition table [ 994.847700][T30902] loop8: partition table beyond EOD, truncated [ 994.874021][T30902] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 996.375220][T30968] loop8: detected capacity change from 0 to 7 [ 996.396334][T30968] Dev loop8: unable to read RDB block 7 [ 996.410944][T30968] loop8: unable to read partition table [ 996.426959][T30968] loop8: partition table beyond EOD, truncated [ 996.440343][T30968] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 997.172558][T31005] usb usb8: usbfs: process 31005 (syz.8.5772) did not claim interface 32 before use [ 997.223448][T31005] usb usb8: usbfs: process 31005 (syz.8.5772) did not claim interface 32 before use [ 997.410905][T31015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 997.820899][T31043] program syz.1.5779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.003431][T31052] input: syz1 as /devices/virtual/input/input199 [ 1000.261884][T31201] usb usb9: usbfs: process 31201 (syz.1.5805) did not claim interface 0 before use [ 1000.640290][T31226] kvm: kvm [31220]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3 [ 1000.736410][T31237] input: syz1 as /devices/virtual/input/input202 [ 1001.481828][T31254] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.627656][T31264] loop8: detected capacity change from 0 to 7 [ 1001.636669][T31264] Dev loop8: unable to read RDB block 7 [ 1001.654942][T31264] loop8: unable to read partition table [ 1001.660821][T31264] loop8: partition table beyond EOD, truncated [ 1001.675281][T31264] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1002.700844][T31301] loop8: detected capacity change from 0 to 7 [ 1002.723204][T29332] Dev loop8: unable to read RDB block 7 [ 1002.728854][T29332] loop8: unable to read partition table [ 1002.750016][T29332] loop8: partition table beyond EOD, truncated [ 1002.787867][T31301] Dev loop8: unable to read RDB block 7 [ 1002.827134][T31301] loop8: unable to read partition table [ 1002.834037][T31301] loop8: partition table beyond EOD, truncated [ 1002.862187][T31301] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1003.589020][T31347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.610385][T31356] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1004.306807][T31394] mkiss: ax0: crc mode is auto. [ 1004.773204][T31408] sp0: Synchronizing with TNC [ 1005.785181][T31461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.856266][T31461] input input205: cannot allocate more than FF_MAX_EFFECTS effects [ 1007.146847][T31498] input: syz1 as /devices/virtual/input/input206 [ 1008.660523][T31560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.973820][T31580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.283720][T31605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.049578][T31647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.870429][T31691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.125657][T31704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.294624][T31711] input: syz1 as /devices/virtual/input/input208 [ 1011.701314][T31726] QAT: Stopping all acceleration devices. [ 1011.953848][T31735] loop8: detected capacity change from 0 to 7 [ 1011.961601][T29332] Dev loop8: unable to read RDB block 7 [ 1011.967385][T29332] loop8: unable to read partition table [ 1011.973467][T29332] loop8: partition table beyond EOD, truncated [ 1011.981504][T31735] Dev loop8: unable to read RDB block 7 [ 1011.987168][T31735] loop8: unable to read partition table [ 1011.993247][T31735] loop8: partition table beyond EOD, truncated [ 1011.999436][T31735] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1016.559994][T31852] input: syz0 as /devices/virtual/input/input209 [ 1017.190388][T31875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.887117][T31932] binder: 31931:31932 ioctl 400c620e 9999999999999999 returned -14 [ 1019.233100][T31943] program syz.7.5942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.302250][T31943] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1021.600947][T32124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.659896][T32124] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1021.729168][T32134] vivid-002: disconnect [ 1021.876561][T32129] vivid-002: reconnect [ 1022.818250][T32147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.863530][T32224] usb usb8: usbfs: process 32224 (syz.7.5976) did not claim interface 0 before use [ 1030.776073][T32227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.260807][T32241] loop8: detected capacity change from 0 to 7 [ 1031.278212][T32229] Dev loop8: unable to read RDB block 7 [ 1031.285086][T32229] loop8: unable to read partition table [ 1031.290951][T32229] loop8: partition table beyond EOD, truncated [ 1031.298723][T32241] Dev loop8: unable to read RDB block 7 [ 1031.311331][T32241] loop8: unable to read partition table [ 1031.317468][T32241] loop8: partition table beyond EOD, truncated [ 1031.324473][T32241] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1031.467870][T32247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.500059][T32247] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1033.834839][T32405] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1033.983131][T32409] loop8: detected capacity change from 0 to 7 [ 1033.991289][T32409] Dev loop8: unable to read RDB block 7 [ 1034.000502][T32409] loop8: unable to read partition table [ 1034.009419][T32409] loop8: partition table beyond EOD, truncated [ 1034.017029][T32409] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1036.906868][T32456] loop8: detected capacity change from 0 to 7 [ 1036.915970][T32273] Dev loop8: unable to read RDB block 7 [ 1036.921672][T32273] loop8: unable to read partition table [ 1036.928769][T32273] loop8: partition table beyond EOD, truncated [ 1036.938561][T32456] Dev loop8: unable to read RDB block 7 [ 1036.944388][T32456] loop8: unable to read partition table [ 1036.950254][T32456] loop8: partition table beyond EOD, truncated [ 1036.972586][T32456] loop_reread_partitions: partition scan of loop8 (ÿÿÿÿ) failed (rc=-5) [ 1054.427335][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.433792][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.857928][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.864788][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1166.412366][ T31] INFO: task kworker/1:8:24473 blocked for more than 143 seconds. [ 1166.420254][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1166.431993][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.440719][ T31] task:kworker/1:8 state:D stack:23816 pid:24473 tgid:24473 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1166.452931][ T31] Workqueue: events rfkill_sync_work [ 1166.458266][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1166.461542][ T31] [ 1166.464753][ T31] __schedule+0x16f5/0x4d00 [ 1166.469345][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1166.474900][ T31] ? schedule+0x165/0x360 [ 1166.479281][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.484220][ T31] ? schedule+0x91/0x360 [ 1166.488497][ T31] schedule+0x165/0x360 [ 1166.494199][ T31] schedule_preempt_disabled+0x13/0x30 [ 1166.499749][ T31] __mutex_lock+0x724/0xe80 [ 1166.505332][ T31] ? __lock_acquire+0xab9/0xd20 [ 1166.510229][ T31] ? __mutex_lock+0x51b/0xe80 [ 1166.523573][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1166.528911][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1166.562927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.568221][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1166.577482][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1166.583937][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1166.589702][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1166.594926][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1166.600711][ T31] rfkill_set_block+0x1cf/0x440 [ 1166.605659][ T31] rfkill_sync_work+0x114/0x200 [ 1166.610563][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1166.616410][ T31] process_scheduled_works+0xae1/0x17b0 [ 1166.622213][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1166.628259][ T31] worker_thread+0x8a0/0xda0 [ 1166.632977][ T31] kthread+0x70e/0x8a0 [ 1166.637090][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1166.642317][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.646943][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1166.652259][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.657508][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.662180][ T31] ret_from_fork+0x3f9/0x770 [ 1166.666819][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.672424][ T31] ? __switch_to_asm+0x39/0x70 [ 1166.677234][ T31] ? __switch_to_asm+0x33/0x70 [ 1166.682094][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.686737][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.691523][ T31] [ 1166.694674][ T31] INFO: task kworker/1:9:24474 blocked for more than 143 seconds. [ 1166.702589][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1166.710277][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.719028][ T31] task:kworker/1:9 state:D stack:24296 pid:24474 tgid:24474 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1166.731086][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1166.738094][ T31] Call Trace: [ 1166.741429][ T31] [ 1166.744448][ T31] __schedule+0x16f5/0x4d00 [ 1166.749017][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1166.754473][ T31] ? schedule+0x165/0x360 [ 1166.758849][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.763794][ T31] ? schedule+0x91/0x360 [ 1166.768371][ T31] schedule+0x165/0x360 [ 1166.772651][ T31] schedule_preempt_disabled+0x13/0x30 [ 1166.778173][ T31] __mutex_lock+0x724/0xe80 [ 1166.783101][ T31] ? look_up_lock_class+0x74/0x170 [ 1166.788246][ T31] ? __mutex_lock+0x51b/0xe80 [ 1166.793007][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1166.799282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1166.804435][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1166.810174][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1166.816088][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1166.822221][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1166.827976][ T31] process_scheduled_works+0xae1/0x17b0 [ 1166.833638][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1166.839657][ T31] worker_thread+0x8a0/0xda0 [ 1166.844317][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1166.850692][ T31] ? __kthread_parkme+0x7b/0x200 [ 1166.855721][ T31] kthread+0x70e/0x8a0 [ 1166.859836][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1166.865015][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.869642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1166.875443][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.880689][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.885375][ T31] ret_from_fork+0x3f9/0x770 [ 1166.890015][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.895757][ T31] ? __switch_to_asm+0x39/0x70 [ 1166.900584][ T31] ? __switch_to_asm+0x33/0x70 [ 1166.905419][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.910058][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.915021][ T31] [ 1166.918236][ T31] INFO: task syz.1.5890:31666 blocked for more than 143 seconds. [ 1166.926071][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1166.936962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.945722][ T31] task:syz.1.5890 state:D stack:26952 pid:31666 tgid:31666 ppid:24718 task_flags:0x400040 flags:0x00004004 [ 1166.957726][ T31] Call Trace: [ 1166.961016][ T31] [ 1166.964020][ T31] __schedule+0x16f5/0x4d00 [ 1166.968573][ T31] ? schedule+0x165/0x360 [ 1166.973137][ T31] ? __lock_acquire+0xab9/0xd20 [ 1166.978015][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.982951][ T31] ? schedule+0x91/0x360 [ 1166.987223][ T31] schedule+0x165/0x360 [ 1166.991382][ T31] schedule_timeout+0x9a/0x270 [ 1166.996226][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1167.001648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.007179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.012488][ T31] ? wait_for_completion+0x267/0x5d0 [ 1167.017826][ T31] wait_for_completion+0x2bf/0x5d0 [ 1167.023008][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1167.028672][ T31] ? __flush_work+0xd2/0xbc0 [ 1167.033344][ T31] ? __flush_work+0xd2/0xbc0 [ 1167.037966][ T31] __flush_work+0x9b9/0xbc0 [ 1167.042555][ T31] ? __flush_work+0xd2/0xbc0 [ 1167.047187][ T31] ? __pfx___flush_work+0x10/0x10 [ 1167.056917][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1167.064610][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1167.069822][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1167.075565][ T31] __cancel_work_sync+0xbe/0x110 [ 1167.080577][ T31] rfkill_unregister+0x92/0x220 [ 1167.085520][ T31] nfc_unregister_device+0x96/0x2a0 [ 1167.090760][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1167.096566][ T31] virtual_ncidev_close+0x56/0x90 [ 1167.101639][ T31] __fput+0x44c/0xa70 [ 1167.105697][ T31] task_work_run+0x1d1/0x260 [ 1167.110334][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1167.115808][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1167.121303][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1167.126726][ T31] do_syscall_64+0x2bd/0x3b0 [ 1167.131347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.136692][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.142939][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1167.147655][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.153678][ T31] RIP: 0033:0x7f7ba238e929 [ 1167.158122][ T31] RSP: 002b:00007ffdaf993f48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1167.166643][ T31] RAX: 0000000000000000 RBX: 00000000000f6b50 RCX: 00007f7ba238e929 [ 1167.174777][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1167.182837][ T31] RBP: 00007f7ba25b7ba0 R08: 0000000000000001 R09: 0000001eaf99423f [ 1167.190842][ T31] R10: 00007f7ba2200000 R11: 0000000000000246 R12: 00007f7ba25b5fac [ 1167.198942][ T31] R13: 00007f7ba25b5fa0 R14: ffffffffffffffff R15: 00007ffdaf994060 [ 1167.206983][ T31] [ 1167.210034][ T31] INFO: task syz.9.5944:31945 blocked for more than 144 seconds. [ 1167.217876][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1167.225673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1167.234679][ T31] task:syz.9.5944 state:D stack:26728 pid:31945 tgid:31942 ppid:25791 task_flags:0x400140 flags:0x00004006 [ 1167.246699][ T31] Call Trace: [ 1167.250012][ T31] [ 1167.253030][ T31] __schedule+0x16f5/0x4d00 [ 1167.257574][ T31] ? __lock_acquire+0xab9/0xd20 [ 1167.262479][ T31] ? schedule+0x165/0x360 [ 1167.266871][ T31] ? __pfx___schedule+0x10/0x10 [ 1167.271750][ T31] ? schedule+0x91/0x360 [ 1167.276100][ T31] schedule+0x165/0x360 [ 1167.280294][ T31] schedule_preempt_disabled+0x13/0x30 [ 1167.285825][ T31] __mutex_lock+0x724/0xe80 [ 1167.290358][ T31] ? __mutex_lock+0x51b/0xe80 [ 1167.295132][ T31] ? rfkill_register+0x37/0x8e0 [ 1167.300072][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1167.305158][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1167.310546][ T31] ? device_initialize+0x24b/0x440 [ 1167.315755][ T31] rfkill_register+0x37/0x8e0 [ 1167.320490][ T31] hci_register_dev+0x3f5/0x890 [ 1167.325442][ T31] hci_uart_tty_ioctl+0x828/0xa00 [ 1167.330506][ T31] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1167.336152][ T31] tty_ioctl+0x9c6/0xde0 [ 1167.340403][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 1167.345569][ T31] __se_sys_ioctl+0xfc/0x170 [ 1167.350207][ T31] do_syscall_64+0xfa/0x3b0 [ 1167.354811][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.360067][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.366189][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1167.370902][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.377370][ T31] RIP: 0033:0x7f831598e929 [ 1167.381980][ T31] RSP: 002b:00007f83137f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.390570][ T31] RAX: ffffffffffffffda RBX: 00007f8315bb6080 RCX: 00007f831598e929 [ 1167.398730][ T31] RDX: 0000000400000009 RSI: 00000000400455c8 RDI: 0000000000000006 [ 1167.406794][ T31] RBP: 00007f8315a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1167.414908][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.422947][ T31] R13: 0000000000000000 R14: 00007f8315bb6080 R15: 00007ffc43e4f588 [ 1167.430943][ T31] [ 1167.434065][ T31] [ 1167.434065][ T31] Showing all locks held in the system: [ 1167.441797][ T31] 1 lock held by khungtaskd/31: [ 1167.446721][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1167.457000][ T31] 1 lock held by kworker/1:1/43: [ 1167.462240][ T31] #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1167.472343][ T31] 2 locks held by getty/5598: [ 1167.477043][ T31] #0: ffff88814d6a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1167.486874][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1167.497198][ T31] 1 lock held by syz-executor/24099: [ 1167.502561][ T31] #0: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1167.512881][ T31] 4 locks held by kworker/1:8/24473: [ 1167.518232][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.529268][ T31] #1: ffffc9000496fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.541795][ T31] #2: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1167.552049][ T31] #3: ffff8880338dd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1167.561816][ T31] 3 locks held by kworker/1:9/24474: [ 1167.567417][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1167.578609][ T31] #1: ffffc90004917bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1167.592227][ T31] #2: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1167.603689][ T31] 1 lock held by syz.1.5890/31666: [ 1167.608825][ T31] #0: ffff8880338dd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1167.618697][ T31] 2 locks held by syz.9.5944/31945: [ 1167.623958][ T31] #0: ffff8880582420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1167.633827][ T31] #1: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1167.643890][ T31] 2 locks held by syz-executor/32185: [ 1167.649273][ T31] #0: ffff88807e302918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1167.659359][ T31] #1: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1167.669382][ T31] 2 locks held by syz-executor/32431: [ 1167.674960][ T31] #0: ffff88805f24a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1167.685399][ T31] #1: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1167.695424][ T31] 3 locks held by syz.7.5997/32468: [ 1167.700655][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.709248][ T31] #1: ffff8880281ee100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 1167.718942][ T31] #2: ffffffff8f9fd3a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1167.728946][ T31] 1 lock held by syz.7.5997/32469: [ 1167.734133][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.742706][ T31] 1 lock held by syz-executor/32479: [ 1167.748016][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.756603][ T31] 1 lock held by syz-executor/32489: [ 1167.761902][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.770450][ T31] 1 lock held by syz-executor/32504: [ 1167.776076][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.784942][ T31] 1 lock held by syz-executor/32508: [ 1167.790264][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.798773][ T31] 1 lock held by syz-executor/32517: [ 1167.804187][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.813087][ T31] 1 lock held by syz-executor/32523: [ 1167.818392][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.826971][ T31] 1 lock held by syz-executor/32539: [ 1167.832293][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.840775][ T31] 1 lock held by syz-executor/32543: [ 1167.846197][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.855191][ T31] 1 lock held by syz-executor/32548: [ 1167.860536][ T31] #0: ffffffff8ebd4788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1167.869163][ T31] [ 1167.871528][ T31] ============================================= [ 1167.871528][ T31] [ 1167.880005][ T31] NMI backtrace for cpu 0 [ 1167.880020][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1167.880057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.880069][ T31] Call Trace: [ 1167.880077][ T31] [ 1167.880085][ T31] dump_stack_lvl+0x189/0x250 [ 1167.880109][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1167.880139][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.880162][ T31] ? __pfx__printk+0x10/0x10 [ 1167.880196][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1167.880226][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1167.880249][ T31] ? _printk+0xcf/0x120 [ 1167.880274][ T31] ? __pfx__printk+0x10/0x10 [ 1167.880298][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1167.880331][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1167.880359][ T31] watchdog+0xfee/0x1030 [ 1167.880380][ T31] ? watchdog+0x1de/0x1030 [ 1167.880406][ T31] kthread+0x70e/0x8a0 [ 1167.880436][ T31] ? __pfx_watchdog+0x10/0x10 [ 1167.880453][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.880481][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1167.880509][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.880536][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.880564][ T31] ret_from_fork+0x3f9/0x770 [ 1167.880586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.880618][ T31] ? __switch_to_asm+0x39/0x70 [ 1167.880642][ T31] ? __switch_to_asm+0x33/0x70 [ 1167.880664][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.880690][ T31] ret_from_fork_asm+0x1a/0x30 [ 1167.880729][ T31] [ 1167.880737][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1168.038385][ C1] NMI backtrace for cpu 1 [ 1168.038402][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1168.038421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.038431][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1168.038462][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 19 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1168.038476][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1168.038490][ C1] RAX: 8e1b8bb8e1bf1300 RBX: ffffffff81979d58 RCX: 8e1b8bb8e1bf1300 [ 1168.038503][ C1] RDX: 0000000000000001 RSI: ffffffff8da4bf4b RDI: ffffffff8be41880 [ 1168.038514][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1168.038526][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fc22ff0 [ 1168.038538][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad7b40 [ 1168.038549][ C1] FS: 0000000000000000(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000 [ 1168.038562][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.038573][ C1] CR2: 0000557d326ed660 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1168.038588][ C1] DR0: 0000000000000001 DR1: 0000000000000006 DR2: 0200000000000001 [ 1168.038598][ C1] DR3: 0000000000000003 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.038608][ C1] Call Trace: [ 1168.038615][ C1] [ 1168.038621][ C1] default_idle+0x13/0x20 [ 1168.038638][ C1] default_idle_call+0x74/0xb0 [ 1168.038656][ C1] do_idle+0x1e8/0x510 [ 1168.038678][ C1] ? __pfx_do_idle+0x10/0x10 [ 1168.038694][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.038726][ C1] cpu_startup_entry+0x44/0x60 [ 1168.038743][ C1] start_secondary+0x101/0x110 [ 1168.038767][ C1] common_startup_64+0x13e/0x147 [ 1168.038795][ C1] [ 1168.039399][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1168.229626][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1168.241429][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.251556][ T31] Call Trace: [ 1168.254853][ T31] [ 1168.257799][ T31] dump_stack_lvl+0x99/0x250 [ 1168.262496][ T31] ? __asan_memcpy+0x40/0x70 [ 1168.267133][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.272353][ T31] ? __pfx__printk+0x10/0x10 [ 1168.276974][ T31] panic+0x2db/0x790 [ 1168.280876][ T31] ? __pfx_panic+0x10/0x10 [ 1168.285301][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1168.291125][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1168.296517][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1168.302708][ T31] watchdog+0x102d/0x1030 [ 1168.307046][ T31] ? watchdog+0x1de/0x1030 [ 1168.311511][ T31] kthread+0x70e/0x8a0 [ 1168.315610][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.320297][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.324901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.330114][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.335324][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.339933][ T31] ret_from_fork+0x3f9/0x770 [ 1168.344528][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.349660][ T31] ? __switch_to_asm+0x39/0x70 [ 1168.354471][ T31] ? __switch_to_asm+0x33/0x70 [ 1168.359244][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.363852][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.368633][ T31] [ 1168.371962][ T31] Kernel Offset: disabled [ 1168.376299][ T31] Rebooting in 86400 seconds..