last executing test programs: 16m34.488761252s ago: executing program 1 (id=2349): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) (rerun: 32) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) (async, rerun: 64) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) (async, rerun: 64) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16m33.090896444s ago: executing program 1 (id=2360): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x60400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000280)={{r1}, r4, 0x1c, @unused=[0x3, 0x9, 0x3, 0x6], @devid}) r5 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000012c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_open_dev$swradio(&(0x7f0000001580), 0x0, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000015c0)={0x7f, 0x34343459, 0x2, 0x5, 0x1, @stepwise={{0x7, 0x4ec}, {0x843, 0xff}, {0xfffff5e4, 0x4}}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001600), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000001640)={{0xff, 0x1}, 'port0\x00', 0x4e, 0x8, 0xe9c, 0x80, 0xbb, 0x7, 0x56, 0x0, 0x1, 0xc}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001700)={{r2, 0x1, 0x5, 0x3ff, 0x1, 0x9, 0x0, 0x9, 0x5, 0x7, 0x7, 0x9, 0x6, 0x5, 0x565}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002700)={r3, r8, "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", "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"}) r9 = dup(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000003700), 0x600000, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000003780)={0x1, 0x7f, 0x2, &(0x7f0000003740)={0x1e, "ba25f6a671d4d41f7bea29880d334dd172747c60ae2af315ded324f0f1e7d298f4"}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000003c00)={0x2, 0x1, 0x1, 0xf39c}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003c80)={0xf0b, 0xb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f000001a5c0)=0xd258) ioctl$VIDIOC_STREAMON(r9, 0x40045612, &(0x7f000001a600)=0x84b) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f000001a640), 0x80, 0x0) ioctl$VIDIOC_G_MODULATOR(r11, 0xc0445636, &(0x7f000001a680)={0x5, "be5347602c61f5a6094e4a94100504ec3c196f2cfc6ca6e0bcb2361f10431c4b", 0x860, 0x6, 0x3, 0x10, 0x4}) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f000001a700)={{r6}, 0x0, 0x4, 0x7}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r11, 0xc0945662, &(0x7f000001a740)={0x2, 0x0, '\x00', {0x0, @reserved}}) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f000001a800)={0x10001}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001a840), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r12, &(0x7f000001a900)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x7, @private0, 0x7}}}, 0x118) 16m32.966606729s ago: executing program 1 (id=2362): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 16m32.832785055s ago: executing program 1 (id=2365): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 16m32.575993853s ago: executing program 1 (id=2367): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0x200, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1b5000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x490100) ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000000100)) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000680)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000011c0)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000180)={0x18, 0x2, 0x0, 0x8}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0xeb5585e46ba929c8, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x5}}}, 0xa0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r1, &(0x7f00000001c0)=""/157, 0x9d) read(r0, &(0x7f0000000280)=""/47, 0x2f) 16m32.23235219s ago: executing program 1 (id=2370): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000580)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r5, &(0x7f00000001c0)="ac8c23baea8f859b4d6f5c80e6a51a857d6e59408f4a6bc664116437441613086411059729ccc7c26bf7d6bf2430e21753a77c7338d031403fc4277bea855948b3d208c37fd4a95075d7239955968c9705d4d629018c815820382c44b18f23e70da19d5b1fe33c30a21cee455d728105662e47f9df20d4312d188202911270c07bd5e1bab9ea3303259535712f9cc11935d30dea9f8b5031728489bf249d176a7489ebb104dad4e0ecb4cb132fac03e281", 0xb1) (async) write$char_usb(r5, &(0x7f00000001c0)="ac8c23baea8f859b4d6f5c80e6a51a857d6e59408f4a6bc664116437441613086411059729ccc7c26bf7d6bf2430e21753a77c7338d031403fc4277bea855948b3d208c37fd4a95075d7239955968c9705d4d629018c815820382c44b18f23e70da19d5b1fe33c30a21cee455d728105662e47f9df20d4312d188202911270c07bd5e1bab9ea3303259535712f9cc11935d30dea9f8b5031728489bf249d176a7489ebb104dad4e0ecb4cb132fac03e281", 0xb1) 16m17.069742312s ago: executing program 32 (id=2370): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000580)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r5, &(0x7f00000001c0)="ac8c23baea8f859b4d6f5c80e6a51a857d6e59408f4a6bc664116437441613086411059729ccc7c26bf7d6bf2430e21753a77c7338d031403fc4277bea855948b3d208c37fd4a95075d7239955968c9705d4d629018c815820382c44b18f23e70da19d5b1fe33c30a21cee455d728105662e47f9df20d4312d188202911270c07bd5e1bab9ea3303259535712f9cc11935d30dea9f8b5031728489bf249d176a7489ebb104dad4e0ecb4cb132fac03e281", 0xb1) (async) write$char_usb(r5, &(0x7f00000001c0)="ac8c23baea8f859b4d6f5c80e6a51a857d6e59408f4a6bc664116437441613086411059729ccc7c26bf7d6bf2430e21753a77c7338d031403fc4277bea855948b3d208c37fd4a95075d7239955968c9705d4d629018c815820382c44b18f23e70da19d5b1fe33c30a21cee455d728105662e47f9df20d4312d188202911270c07bd5e1bab9ea3303259535712f9cc11935d30dea9f8b5031728489bf249d176a7489ebb104dad4e0ecb4cb132fac03e281", 0xb1) 10m39.329506013s ago: executing program 2 (id=5704): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x6}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000001c0)=0x200) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000064d564b", @ANYBLOB="6103332529d8"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000000c0)={0x8, 0x80684}) 10m38.708723324s ago: executing program 2 (id=5708): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) 10m38.561578468s ago: executing program 2 (id=5709): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 10m37.918181281s ago: executing program 2 (id=5714): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x19}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 10m36.847368611s ago: executing program 2 (id=5717): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x28c3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r7, 0x6f000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r8, &(0x7f00000000c0)={0x14}, 0x14) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 10m36.606916016s ago: executing program 2 (id=5719): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x10}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x1ff, 0x1}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x5, 0x7, {0x5, @struct={0x6, 0x2}, 0x0, 0x9, 0x2, 0xb, 0xbf3, 0xfe, 0x8c, @struct={0x2, 0x8}, 0x80, 0x6b58, [0x100000000, 0x4, 0x6, 0x1, 0x7fff, 0x80]}, {0x1, @usage=0x2, 0x0, 0x1, 0x4, 0x2, 0x8930, 0x2, 0xa, @struct={0x0, 0x1000}, 0x3, 0xd, [0x1, 0xffffffffffff0000, 0xfffffffffffff56e, 0x8, 0x4, 0x5]}, {0x3ff, @struct={0x8, 0x36}, 0x0, 0x8, 0x1, 0x4, 0x0, 0x4, 0x480, @struct={0xffffcb69, 0x2}, 0xfffffffb, 0x5, [0x8, 0x5, 0x0, 0x0, 0x6, 0x1]}, {0x7, 0x8000000000000001, 0x9c2c}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000d00)={0x2, 0x5, {0x0, @usage=0xb6, r3, 0x0, 0xffff, 0xffffffffffffffff, 0x7, 0x4, 0x0, @usage=0x9, 0x0, 0x8001, [0x3d80000000000, 0x2, 0x2, 0x7fff0, 0x58, 0x1ff]}, {0xcd, @usage, r4, 0x7fffffff, 0x4, 0x9, 0x9, 0x85a, 0xe8e11baa80cc826c, @usage=0x1, 0x400, 0x9, [0x80, 0xffffffffffffffff, 0x2, 0x60000000, 0x6, 0xec]}, {0x3, @struct={0xf38c, 0x6f78}, r5, 0x0, 0x0, 0xfffffffffffffc01, 0x3, 0x4, 0x4, @struct={0xfffffffd, 0x1}, 0x3, 0x9, [0x8, 0xffffffffffffffff, 0x4, 0x6, 0x8, 0x1]}, {0x7, 0x6b74, 0x80000001}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x400) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000001140)="e033ef685214fe48f795639822bd085e9c40dd198168be314f9f9facb44fe225524dd344ebf2fd23be5f066a4234c038b9e7cebcdfbf29486e8286d6d8") ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000001180)={0x6, 0x81}) syz_open_dev$video(&(0x7f00000011c0), 0xa, 0x482200) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000001200)) write$sndseq(r6, &(0x7f0000001300)=[{0xfb, 0x9, 0x7b, 0x8, @tick=0xd9, {0xa9, 0x9}, {0x8, 0x7}, @connect={{0x9, 0x7}, {0x63, 0x93}}}, {0xfb, 0xc, 0x1, 0x0, @time={0x8a, 0x8}, {0x2}, {0x4, 0xbf}, @ext={0x8e, &(0x7f0000001240)="f07e01c7512d5fbe16c0d43d60c8e52d236d480c2c0f0854271d00d91704862781b1047e5fe484f7d57fc301d6f0958a5086bcf0536244583da2062b3552983b6726103386a68d832b298dd63e36bfdabc54127c286b417d39e44ea5d8e1b34645b654f40ff090fb38c596e965e36e5ae3d99b32e46b79e59ab46724cc2fe1832e70c8c1eedc5cf6f828d23ae1a1"}}, {0x8, 0x3, 0xc0, 0x61, @tick=0x9, {0xb7, 0xe}, {0x40, 0x7}, @raw8={"749fe6d6c5afa1ecc35b0482"}}, {0x7, 0x3, 0x8, 0x7f, @tick=0x1, {0x7d, 0x9}, {0xd, 0x81}, @queue={0xd7, {0x10001, 0x6}}}, {0x8b, 0x3f, 0x90, 0x9, @tick=0x7, {0x11}, {0x0, 0x9}, @raw32={[0x6, 0x9, 0x4]}}, {0x2, 0x9, 0x3, 0x7, @time={0xc, 0x40}, {0x0, 0x6}, {0x1, 0x1}, @raw32={[0xd, 0xf2, 0x1]}}], 0xa8) write$sndseq(r2, &(0x7f0000001400)=[{0x5, 0x8, 0x2, 0x1, @tick=0x5, {0x5, 0x5}, {0xc, 0xcd}, @raw8={"cb6102e9f25eb93a774fbb11"}}, {0x4, 0x7, 0x6, 0xa6, @time={0x6, 0x9}, {0x80, 0x1}, {0x0, 0x5}, @note={0x8, 0xfe, 0xf7, 0x9, 0x7fff}}, {0xc, 0x65, 0x8, 0x5, @time={0x9, 0xffff76a4}, {0x7, 0x8}, {0xff, 0x3}, @connect={{0xfc, 0x5}, {0x42, 0x1d}}}, {0x5e, 0x2b, 0x6, 0x9, @tick=0x8, {0x47, 0x5}, {0xc, 0x4}, @connect={{0x0, 0x9}, {0xb, 0x5}}}, {0x1, 0x6, 0xfb, 0x39, @time={0x40, 0xffffff80}, {0x2c, 0x9}, {0x5, 0x4}, @raw32={[0x5, 0x3, 0x6]}}, {0x4, 0xf7, 0x9, 0x7, @time={0x7ff, 0x9}, {0x0, 0x8}, {0x2, 0x1}, @quote={{0x2, 0x7}, 0x6, &(0x7f00000013c0)={0x3, 0xfb, 0x11, 0x0, @time={0x2, 0x9}, {0x83, 0x81}, {0x9, 0xf}, @time=@tick=0x8}}}, {0xe, 0x5, 0xfb, 0x40, @time={0xfffffff7, 0x80000001}, {0x8, 0x5}, {0x6}, @result={0x22, 0x5}}, {0x6, 0x6, 0x40, 0x20, @tick=0x40, {0x2, 0x6}, {0x81, 0x2}, @note={0xd0, 0xe, 0x81, 0x6, 0x5}}], 0xe0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001500)) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000001580)={0x10, @sdr={0x32314742}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001680)=0xe4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0x1e3002) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001700)={0x5b89, 0x2}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000001740)) r9 = dup(r1) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000001780)) read$usbfs(r9, &(0x7f00000017c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000002800)={{0x0, 0x3, 0x4, 0x3, 0x400}}) 10m21.530945308s ago: executing program 33 (id=5719): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x10}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x1ff, 0x1}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x6) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x5, 0x7, {0x5, @struct={0x6, 0x2}, 0x0, 0x9, 0x2, 0xb, 0xbf3, 0xfe, 0x8c, @struct={0x2, 0x8}, 0x80, 0x6b58, [0x100000000, 0x4, 0x6, 0x1, 0x7fff, 0x80]}, {0x1, @usage=0x2, 0x0, 0x1, 0x4, 0x2, 0x8930, 0x2, 0xa, @struct={0x0, 0x1000}, 0x3, 0xd, [0x1, 0xffffffffffff0000, 0xfffffffffffff56e, 0x8, 0x4, 0x5]}, {0x3ff, @struct={0x8, 0x36}, 0x0, 0x8, 0x1, 0x4, 0x0, 0x4, 0x480, @struct={0xffffcb69, 0x2}, 0xfffffffb, 0x5, [0x8, 0x5, 0x0, 0x0, 0x6, 0x1]}, {0x7, 0x8000000000000001, 0x9c2c}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000d00)={0x2, 0x5, {0x0, @usage=0xb6, r3, 0x0, 0xffff, 0xffffffffffffffff, 0x7, 0x4, 0x0, @usage=0x9, 0x0, 0x8001, [0x3d80000000000, 0x2, 0x2, 0x7fff0, 0x58, 0x1ff]}, {0xcd, @usage, r4, 0x7fffffff, 0x4, 0x9, 0x9, 0x85a, 0xe8e11baa80cc826c, @usage=0x1, 0x400, 0x9, [0x80, 0xffffffffffffffff, 0x2, 0x60000000, 0x6, 0xec]}, {0x3, @struct={0xf38c, 0x6f78}, r5, 0x0, 0x0, 0xfffffffffffffc01, 0x3, 0x4, 0x4, @struct={0xfffffffd, 0x1}, 0x3, 0x9, [0x8, 0xffffffffffffffff, 0x4, 0x6, 0x8, 0x1]}, {0x7, 0x6b74, 0x80000001}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x400) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000001140)="e033ef685214fe48f795639822bd085e9c40dd198168be314f9f9facb44fe225524dd344ebf2fd23be5f066a4234c038b9e7cebcdfbf29486e8286d6d8") ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000001180)={0x6, 0x81}) syz_open_dev$video(&(0x7f00000011c0), 0xa, 0x482200) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000001200)) write$sndseq(r6, &(0x7f0000001300)=[{0xfb, 0x9, 0x7b, 0x8, @tick=0xd9, {0xa9, 0x9}, {0x8, 0x7}, @connect={{0x9, 0x7}, {0x63, 0x93}}}, {0xfb, 0xc, 0x1, 0x0, @time={0x8a, 0x8}, {0x2}, {0x4, 0xbf}, @ext={0x8e, &(0x7f0000001240)="f07e01c7512d5fbe16c0d43d60c8e52d236d480c2c0f0854271d00d91704862781b1047e5fe484f7d57fc301d6f0958a5086bcf0536244583da2062b3552983b6726103386a68d832b298dd63e36bfdabc54127c286b417d39e44ea5d8e1b34645b654f40ff090fb38c596e965e36e5ae3d99b32e46b79e59ab46724cc2fe1832e70c8c1eedc5cf6f828d23ae1a1"}}, {0x8, 0x3, 0xc0, 0x61, @tick=0x9, {0xb7, 0xe}, {0x40, 0x7}, @raw8={"749fe6d6c5afa1ecc35b0482"}}, {0x7, 0x3, 0x8, 0x7f, @tick=0x1, {0x7d, 0x9}, {0xd, 0x81}, @queue={0xd7, {0x10001, 0x6}}}, {0x8b, 0x3f, 0x90, 0x9, @tick=0x7, {0x11}, {0x0, 0x9}, @raw32={[0x6, 0x9, 0x4]}}, {0x2, 0x9, 0x3, 0x7, @time={0xc, 0x40}, {0x0, 0x6}, {0x1, 0x1}, @raw32={[0xd, 0xf2, 0x1]}}], 0xa8) write$sndseq(r2, &(0x7f0000001400)=[{0x5, 0x8, 0x2, 0x1, @tick=0x5, {0x5, 0x5}, {0xc, 0xcd}, @raw8={"cb6102e9f25eb93a774fbb11"}}, {0x4, 0x7, 0x6, 0xa6, @time={0x6, 0x9}, {0x80, 0x1}, {0x0, 0x5}, @note={0x8, 0xfe, 0xf7, 0x9, 0x7fff}}, {0xc, 0x65, 0x8, 0x5, @time={0x9, 0xffff76a4}, {0x7, 0x8}, {0xff, 0x3}, @connect={{0xfc, 0x5}, {0x42, 0x1d}}}, {0x5e, 0x2b, 0x6, 0x9, @tick=0x8, {0x47, 0x5}, {0xc, 0x4}, @connect={{0x0, 0x9}, {0xb, 0x5}}}, {0x1, 0x6, 0xfb, 0x39, @time={0x40, 0xffffff80}, {0x2c, 0x9}, {0x5, 0x4}, @raw32={[0x5, 0x3, 0x6]}}, {0x4, 0xf7, 0x9, 0x7, @time={0x7ff, 0x9}, {0x0, 0x8}, {0x2, 0x1}, @quote={{0x2, 0x7}, 0x6, &(0x7f00000013c0)={0x3, 0xfb, 0x11, 0x0, @time={0x2, 0x9}, {0x83, 0x81}, {0x9, 0xf}, @time=@tick=0x8}}}, {0xe, 0x5, 0xfb, 0x40, @time={0xfffffff7, 0x80000001}, {0x8, 0x5}, {0x6}, @result={0x22, 0x5}}, {0x6, 0x6, 0x40, 0x20, @tick=0x40, {0x2, 0x6}, {0x81, 0x2}, @note={0xd0, 0xe, 0x81, 0x6, 0x5}}], 0xe0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000001500)) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000001580)={0x10, @sdr={0x32314742}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001680)=0xe4) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0x1e3002) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001700)={0x5b89, 0x2}) ioctl$TIOCCBRK(r0, 0x5428) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000001740)) r9 = dup(r1) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000001780)) read$usbfs(r9, &(0x7f00000017c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000002800)={{0x0, 0x3, 0x4, 0x3, 0x400}}) 8m43.033393211s ago: executing program 5 (id=6516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)=0xf000) read$FUSE(r1, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x1ff, 0x0, 0x2, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m42.651843215s ago: executing program 5 (id=6520): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 8m42.47220761s ago: executing program 5 (id=6521): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x60003, 0x0, [0x4, 0x8, 0x7, 0x5, 0x1, 0x81, 0xc0d7, 0x7]}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000042342, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 8m42.148200137s ago: executing program 5 (id=6524): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x34440, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 8m42.037394719s ago: executing program 5 (id=6527): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x88380, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100b, 0x8000000000002}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000001f0001c0000000000400000000000000b508f201df0a707425e6af16f7ef77bef33d8b599fc7fed63798b999dccf11689a2a75b0dbbf70ebe0514b0998f12ef3c47477e829a133a9aa954b36c4166290530e797eea2b"]) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000001c0)={0x0, 0x0, r8, r9, 0x8, 0x2, 0x3, 0x9, {0x26, 0xa6, 0xa9b5, 0xa00, 0x0, 0x4, 0x100, 0x8, 0x6, 0x0, 0x8, 0x9, 0x4, 0x0, "4b303d47a4ff20e1adc5145d972e6b13c2c93f2f7b10a41c971bf63780e6cc37"}}) close(r0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, 0x0) ioctl$TIOCPKT(r11, 0x5420, &(0x7f0000000080)=0x6) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) r13 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r13, 0x540a, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) openat(r1, &(0x7f0000000040)='./file1\x00', 0x101740, 0x15f) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x7845d000) 8m41.749846s ago: executing program 5 (id=6531): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14142323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001940), 0x800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f00000019c0)={0x48}) ioctl$TCSETA(r3, 0x5434, 0x0) r5 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058, 0x0, 0x4000000000000001}]}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x7, 0x8, 0x4}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0xc048aec8, &(0x7f0000000140)={0x6, 0x2db, 0x0, 0x0}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000140)={0x3, r2}) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 8m26.675366279s ago: executing program 34 (id=6531): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14142323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001940), 0x800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f00000019c0)={0x48}) ioctl$TCSETA(r3, 0x5434, 0x0) r5 = syz_open_dev$video(&(0x7f0000000c80), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x41595556}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058, 0x0, 0x4000000000000001}]}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x7, 0x8, 0x4}) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0xc048aec8, &(0x7f0000000140)={0x6, 0x2db, 0x0, 0x0}) r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000140)={0x3, r2}) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 7m23.692534744s ago: executing program 0 (id=7214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r5, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0xa, @vbi={0xe1, 0xfffffffa, 0x0, 0x3631564e, [0x9, 0x5], [0x2, 0x7ff], 0x33}}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40603d07, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x5, 0x181301) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000200)) ioctl$USBDEVFS_RELEASE_PORT(r9, 0x80045519, &(0x7f0000000080)=0x6) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r11, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r12 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0xa0200, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r12, &(0x7f00000000c0)={0x2, 0xb}, 0x2) 7m23.344400088s ago: executing program 0 (id=7217): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x14f102, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006680)={0x2020}, 0x2020) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async, rerun: 64) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) (async) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (rerun: 64) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (rerun: 32) 7m23.273087427s ago: executing program 0 (id=7218): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/120, 0x78) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000100)) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x11) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x24245fae19a5c0da}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x5a051feb1f984a1d, 0x8010, r4, 0x7dfff000) 7m23.001017205s ago: executing program 0 (id=7220): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x100001, {0x6, 0x2, 0x100000001, 0x0, 0x406, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 7m22.816436873s ago: executing program 0 (id=7221): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000200)={0x2, 0xe, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r4, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r4, 0x40101286, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r5, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 7m22.587791319s ago: executing program 0 (id=7222): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(r2, 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000480)="cd", 0x1}], 0x1, 0x7, 0x1) (async) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000480)="cd", 0x1}], 0x1, 0x7, 0x1) read$FUSE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000000)=0x3ff) (async) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000000)=0x3ff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x1000000000, 0x5, 0x3e, 0x2000000, 0x1fffffc, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x80000001, 0x0, 0x3, 0x2, 0x100000000000000], 0xf000, 0x1c5103}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x1000000000, 0x5, 0x3e, 0x2000000, 0x1fffffc, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x80000001, 0x0, 0x3, 0x2, 0x100000000000000], 0xf000, 0x1c5103}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x4) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000002404", @ANYRESDEC=r8, @ANYRES16=r7, @ANYRESHEX=r9, @ANYRESDEC=r7]) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000002404", @ANYRESDEC=r8, @ANYRES16=r7, @ANYRESHEX=r9, @ANYRESDEC=r7]) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x145541) ioctl$USBDEVFS_GETDRIVER(r10, 0x41045508, &(0x7f0000000080)={0x2, "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"}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r11, 0xc05c6104, &(0x7f00000000c0)) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) 7m7.404873063s ago: executing program 35 (id=7222): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(r2, 0x0, 0x0) (async) read$FUSE(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000480)="cd", 0x1}], 0x1, 0x7, 0x1) (async) pwritev(r5, &(0x7f0000000540)=[{&(0x7f0000000480)="cd", 0x1}], 0x1, 0x7, 0x1) read$FUSE(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) (async) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000000)=0x3ff) (async) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000000)=0x3ff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x1000000000, 0x5, 0x3e, 0x2000000, 0x1fffffc, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x80000001, 0x0, 0x3, 0x2, 0x100000000000000], 0xf000, 0x1c5103}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x1000000000, 0x5, 0x3e, 0x2000000, 0x1fffffc, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x80000001, 0x0, 0x3, 0x2, 0x100000000000000], 0xf000, 0x1c5103}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x4) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000002404", @ANYRESDEC=r8, @ANYRES16=r7, @ANYRESHEX=r9, @ANYRESDEC=r7]) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000002404", @ANYRESDEC=r8, @ANYRES16=r7, @ANYRESHEX=r9, @ANYRESDEC=r7]) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x145541) ioctl$USBDEVFS_GETDRIVER(r10, 0x41045508, &(0x7f0000000080)={0x2, "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"}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES8]) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r11, 0xc05c6104, &(0x7f00000000c0)) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) 4m57.652193635s ago: executing program 4 (id=8593): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x9}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0xb, 0x1, 0x0, 0x10}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x3, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x2800, 0x6, 0x8000, 0xbb6, 0x9, 0x10, {0x8}, 0xd0, 0x9}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) r5 = syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000140)={0x8, "df6e82e785d1ca0b7c6ed109222e3603a51d33df608451c4829d6157d27372e0", 0x2, 0x80, 0x4, 0x6, 0xa, 0x1, 0x7, 0x3714}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 4m57.620262515s ago: executing program 4 (id=8595): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/113, 0x71}], 0x1, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x20001100}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x759482, 0x0) read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$adsp1(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80044d76, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 4m57.440234281s ago: executing program 4 (id=8597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xe}) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000000)=0x2) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (rerun: 32) 4m57.108037894s ago: executing program 4 (id=8603): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000340)=""/60) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m56.284236509s ago: executing program 4 (id=8611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f00007b5000/0x4000)=nil, 0x4000, 0x1000006, 0x4000010, r3, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0x1, 0x3}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 4m55.26173426s ago: executing program 4 (id=8621): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5}) (async, rerun: 64) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) (async, rerun: 64) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2}) close(r1) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r7, 0x7dfff000) 4m40.086748017s ago: executing program 36 (id=8621): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r6}) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5}) (async, rerun: 64) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28}) (async, rerun: 64) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2}) close(r1) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r7, 0x7dfff000) 4.999366282s ago: executing program 8 (id=10950): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (rerun: 32) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r7, 0x0, &(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x3}) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20400) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) 4.710814841s ago: executing program 8 (id=10953): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000240)={0xfffffffd, 0x0, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x15}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) preadv(r3, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/6, 0x6}], 0x1, 0xbf4, 0x8) 4.005325563s ago: executing program 8 (id=10957): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) 3.897212478s ago: executing program 8 (id=10958): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 3.609279699s ago: executing program 8 (id=10961): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0x9f) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 3.380009755s ago: executing program 6 (id=10963): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000700)={0x48, 0x8, r4, 0x0, 0xfffffffffffffffb, 0x6, &(0x7f0000000680)="9ee0a38afff6"}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0xbc0ea000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x4, 0x2}) 3.147187225s ago: executing program 6 (id=10965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001240), 0x4041, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000001680)={0x51, 0xc, &(0x7f0000001280)="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"}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a03, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r3 = dup(r1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x4000, 0x0}) mmap(&(0x7f00006f8000/0x2000)=nil, 0x2000, 0x0, 0x28011, r3, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x1010, r5, 0x7dfff000) write$UHID_INPUT(r4, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000001880)=0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001900), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r11, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) close(0x3) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000016c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000001740)={{0xa, 0x2, 0x1, 0x9, 'syz1\x00', 0xb}, 0x2, 0x20, 0x6, r12, 0x1, 0x0, 'syz0\x00', &(0x7f0000001700)=['/dev/nullb0\x00'], 0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000018c0)={0x1fe, 0x1, 0x2, 0x1000, &(0x7f0000787000/0x1000)=nil}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.048190816s ago: executing program 8 (id=10966): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000040)={0x1}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 2.870748748s ago: executing program 6 (id=10967): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x95) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000000010040"]) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000840)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x560e, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1.728450019s ago: executing program 7 (id=10971): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x5, 0x0, [{0xa79, 0x0, 0x9}, {0xbd1, 0x0, 0x80}, {0x39b, 0x0, 0x2}, {0x1e39, 0x0, 0x11e2}, {0xaa9, 0x0, 0x2}]}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x8, 0x1}) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x40000071, 0x0, 0x6}, {0x326, 0x0, 0x8}, {0xad2, 0x0, 0x5}]}) (async) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x10100, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000140)={[0x7ff, 0x8, 0x8, 0xfffffff7, 0x4, 0x6, 0x4, 0x5, 0x555, 0x7, 0x0, 0xf, 0x6, 0x6, 0x9, 0x7, 0x6, 0x1000000, 0x40, 0x1, 0xf34, 0xa, 0x2, 0x1, 0x1, 0xfffffffb, 0x7, 0xc0f, 0xd71e, 0x9, 0x1, 0x7ff, 0x3, 0xfffffff2, 0x90b, 0x6, 0x2d8b, 0x7, 0x5562, 0x6, 0x401, 0x9, 0x7fff, 0xd, 0x1000, 0x6, 0x20, 0xffffffff, 0x4, 0x6, 0x7, 0x0, 0x400, 0x200, 0x2000443c, 0x5d, 0x8000, 0x0, 0x3a10, 0x8, 0x8, 0x400, 0x30, 0x7ff, 0x7, 0x9, 0x2, 0x6, 0x8, 0x7ff, 0xd34, 0x20000000, 0x4, 0x3, 0x0, 0x10000, 0x9, 0x10eb, 0xfffffff1, 0xff, 0x0, 0x0, 0x8, 0xb, 0x880f, 0x9, 0x5, 0x1, 0x9, 0x9, 0x5, 0x400, 0xf37d, 0x9, 0x1, 0x9, 0x0, 0x51cc4f6c, 0x5, 0x8001, 0x7, 0x2, 0xffffffff, 0x6c96, 0x6, 0x86, 0x5, 0x9, 0x6, 0x4, 0x3, 0x5, 0x8cb, 0x7, 0x8, 0x3, 0x3, 0x6, 0x7, 0x7, 0x8, 0x0, 0x3ff, 0x3, 0xfff, 0x5, 0x1, 0x7, 0x8, 0x4, 0x5, 0x3, 0xe779, 0x80000001, 0x9, 0xd33, 0x60000, 0x40, 0xa8, 0x5, 0x7fff, 0x8, 0x6, 0x9, 0x400, 0x8000, 0x3, 0x0, 0x5, 0x401, 0xa1d, 0x1, 0x7, 0x900000, 0x3ff, 0xf8b, 0x7, 0x7, 0x0, 0xfff, 0x3, 0x5, 0x8001, 0x6, 0x7fffffff, 0x8000, 0x41, 0x6, 0x241, 0x3, 0x4, 0x6, 0x7db6, 0x2e800000, 0x4, 0x5, 0x81, 0x3, 0x8, 0x7, 0x5, 0x401, 0x0, 0x8, 0x4, 0x9, 0x16, 0x3, 0x8000, 0x7f, 0xfff, 0x10000, 0x2, 0xffffffff, 0x3, 0x0, 0x2, 0x971, 0xcf7, 0x3, 0x6, 0xc1a, 0xfffffffc, 0xff, 0x0, 0xd, 0x8, 0x2, 0x4, 0x4, 0x8, 0x4, 0x7, 0x5, 0x8001, 0x7, 0x5fc0, 0x80000000, 0x8001, 0xfeb8, 0x9, 0xff, 0x5, 0x608, 0x8, 0x1, 0x5, 0x6, 0x92, 0x9, 0x3, 0xbdab, 0xcf88, 0x9, 0x6ee, 0xe8d, 0x6, 0xfffffff7, 0x9, 0x7, 0x106e, 0x2, 0x7, 0x80000000, 0x5, 0x9, 0x9, 0x200, 0x1ff, 0x1, 0xc000000, 0x8534, 0x19e8000, 0x5, 0x5, 0x6, 0x5, 0xffffffc0, 0x4, 0x800, 0x68, 0x7f, 0x9, 0x3, 0x2, 0x40, 0x155f59b7, 0x3, 0x20, 0x70000000, 0x6, 0x1, 0x0, 0x4, 0x6, 0x1, 0xc8c0, 0x1, 0x63, 0x2, 0xab08, 0x6, 0x3, 0x6, 0x3, 0x8, 0x0, 0x7, 0x0, 0x8, 0x7, 0xdaa, 0x1, 0x5, 0x4, 0x80000001, 0x850, 0x5, 0x7, 0x5, 0x3, 0x1, 0x7, 0x1, 0xffffffff, 0x8, 0x8, 0xcd45510, 0x0, 0xccf2, 0xff, 0x0, 0xc, 0x0, 0x3, 0x4, 0x9, 0x9, 0x0, 0x5, 0x4, 0x0, 0x9, 0xd, 0x0, 0x1f22, 0x81, 0x7, 0xfffffff8, 0x6, 0x7, 0xa0, 0x3, 0x4, 0xffffffff, 0x3e, 0x9, 0xc2, 0xf, 0x8, 0x0, 0x1, 0xfff, 0x8, 0xfffff001, 0x8, 0x80000000, 0x4, 0x1, 0x200, 0x5, 0x9, 0x10001, 0x7, 0x355b, 0x2, 0x8, 0x4, 0xd, 0x8, 0x3, 0x8, 0x800, 0x0, 0x7f, 0x7, 0x7, 0x5bdc, 0x8, 0xcc, 0xd, 0xe, 0x7, 0x4, 0xffd2, 0xe6, 0x7, 0x3, 0x6, 0x8000, 0x7fff, 0x4, 0x4, 0x3, 0x4, 0xff, 0x3, 0x3, 0x75f12fc1, 0x9, 0x1, 0x10001, 0x4, 0x6, 0x8, 0x80000000, 0x3, 0x1, 0x5, 0x8, 0x5, 0x67bb, 0x8, 0x1000, 0x68d, 0x4, 0x0, 0x7, 0xc8, 0x2, 0x11f8, 0x3, 0x55a, 0x0, 0x80, 0x8, 0x101, 0x2, 0x101, 0x3, 0xa, 0x3, 0x3, 0xc2, 0x10000, 0x5, 0x7fff, 0xc, 0xc70, 0x7, 0x7, 0x9, 0xc, 0x337d85f7, 0xda41, 0x40000000, 0x4, 0x8, 0x0, 0x4, 0x2, 0xfff, 0xd93e, 0x7, 0x1, 0x8, 0x5, 0xc2d, 0x9, 0xfffffffe, 0x2, 0xfff, 0xffffffff, 0xd, 0x3, 0x7, 0x4c3, 0xd0, 0x8, 0xb2f, 0x0, 0x5, 0x1a0, 0xf771fd5d, 0x0, 0xe4a, 0x2, 0x2, 0x2, 0x7fffffff, 0xb0, 0x1, 0xef2, 0xfaf, 0x4, 0x1000, 0x5, 0x4, 0x130f, 0x5, 0x5, 0xff, 0xe1, 0x0, 0x80, 0x7d, 0x7, 0x7, 0x200, 0x23b4, 0x8fc3, 0x2, 0x2, 0x5, 0x7fff, 0xe5ee45c8, 0x9, 0x776, 0x8, 0xa, 0x4, 0x4, 0x3, 0x8b6, 0xb, 0x8001, 0x4, 0x0, 0x9, 0x100, 0xfff, 0x2ee0000, 0x8, 0x80000000, 0xffffffff, 0x8001, 0x9, 0x8, 0x0, 0xfffffffa, 0x3, 0x8, 0x2, 0x3, 0x2, 0x80a3, 0x0, 0x0, 0x8, 0x0, 0x9, 0x8, 0x26, 0x4, 0x5, 0x4, 0x8, 0x5, 0x6, 0x400, 0x400, 0x9, 0xff, 0x5, 0x7, 0x320, 0x1, 0x1, 0x5, 0x5, 0xffffe430, 0x7, 0x7, 0x0, 0x2, 0xfffffff9, 0x7fff, 0x4, 0x6, 0x6, 0xc, 0xff, 0xfffffccf, 0x3, 0x5, 0xd, 0x6, 0x2, 0x2, 0xffffffff, 0x5, 0xe, 0x1, 0x401, 0x0, 0x2, 0x1, 0x2, 0x1, 0x50756a78, 0x1, 0x3, 0x9, 0x0, 0x0, 0x4, 0x854, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0x1ff, 0x0, 0x5, 0x8001, 0x400, 0x8, 0x3, 0x0, 0x4, 0x200, 0x3, 0x3, 0x100, 0xc25e, 0x4, 0x10000, 0x3, 0xffffffff, 0x8, 0x3, 0xe, 0x3, 0x3, 0x1, 0x7, 0xfff, 0x7f, 0x0, 0x7, 0x2, 0xe, 0x2, 0x100, 0xd06, 0x9, 0x1, 0x8, 0x2, 0x2, 0x8, 0x7, 0x8001, 0x8001, 0x5, 0xed9, 0x7, 0x6, 0x2, 0x7ff, 0x4, 0x0, 0x6, 0xcc1, 0x5, 0x8, 0x3, 0x0, 0x3, 0x5, 0x80, 0xf, 0x2, 0x200, 0x80000001, 0x78, 0x61d765ad, 0x7, 0x2, 0x5, 0x6, 0x7, 0xadc0, 0x800, 0x3, 0x4, 0x1, 0x3, 0x10, 0x800, 0x80000000, 0x5, 0x101, 0x2, 0x8, 0x8, 0x6, 0x551, 0x7ff, 0x5, 0x7ff, 0x83f, 0x7, 0x2, 0x5, 0x101, 0xfffffffc, 0x9, 0x0, 0x8, 0x7f, 0x8, 0x4, 0x9, 0x6, 0x6, 0xfffffffb, 0x1, 0x0, 0x8, 0x81, 0x9, 0xad, 0x3, 0x8, 0x40, 0x7, 0x8, 0x80, 0x3, 0x7, 0x4, 0x8, 0x2, 0x100, 0x8, 0x6, 0x4, 0x7, 0x1, 0x2, 0x5, 0x0, 0x1ff, 0x10001, 0xffffffff, 0x6, 0xe, 0x8, 0x10001, 0x7, 0x1, 0x87e0, 0x7a63, 0x800, 0x9, 0x3, 0x148, 0x6, 0x0, 0xfffffbff, 0x0, 0x81, 0x100, 0x5, 0x8, 0x5, 0x4, 0x3, 0x6, 0x9, 0x0, 0x2b4, 0x1, 0x966, 0x4, 0xffff, 0x200, 0x1, 0x40, 0xfffffffc, 0xef0, 0x60000, 0x7fffffff, 0x0, 0xdec5, 0x4, 0x1, 0xb8, 0x4, 0xffff, 0xa, 0x5, 0x5, 0x42a, 0x0, 0x4, 0x1, 0xe, 0x362, 0x7ff, 0x0, 0x7, 0x3, 0x8, 0x1, 0x200, 0x6, 0x200, 0x83cd, 0xffffffff, 0x9, 0xfff, 0x2, 0x6, 0x0, 0xff, 0x3, 0x8, 0xfffffff7, 0x2, 0x8, 0x0, 0x0, 0x40, 0x401, 0x7, 0x8, 0x0, 0x0, 0x5, 0x3, 0x5, 0x2, 0xe77b, 0x0, 0x3, 0x2, 0x1, 0x7, 0x1, 0x6, 0x8000, 0x8, 0x2fb, 0x7f, 0x100, 0x5, 0x3, 0xfffffffc, 0xfffffffb, 0x10001, 0x5, 0x6, 0x5, 0x8, 0x5, 0x800, 0x2, 0x1, 0x8, 0x533, 0x8001, 0xefa, 0x61d, 0x81, 0x5, 0xfff, 0x4, 0x5, 0xf71, 0x348, 0x7fffffff, 0x7ff, 0x3e, 0x9, 0x3, 0x4, 0xcec, 0x191, 0xd, 0x19ef, 0x2d7, 0x3, 0x10, 0x7, 0x8, 0x3, 0x4, 0x9, 0x2, 0x9d5, 0x7, 0x8f, 0xc5bb, 0x8, 0x91855ab, 0x4, 0x1, 0x5, 0x8, 0x9, 0x7, 0x7fff, 0x2, 0x1, 0x10, 0x6, 0x6, 0x3, 0xf016, 0x200, 0x10, 0x0, 0x1, 0x89, 0x0, 0x9, 0x1, 0x5, 0x2, 0x8, 0xb24b, 0x40, 0x3, 0x1, 0x6, 0x9, 0x7, 0x6, 0x4, 0x9, 0xc, 0xffff, 0x4, 0x0, 0x2, 0x7, 0x8000, 0x44c, 0xffff1e15, 0xd, 0x3, 0xe, 0x5, 0x47, 0x5, 0x7fffffff, 0xfffff800, 0x8, 0x0, 0x9, 0x3, 0x6, 0x5, 0x1, 0x7fff, 0xfffffff6, 0x2, 0xf, 0x7, 0x9, 0xa555, 0x0, 0xd, 0x9, 0x8, 0x3137, 0xee, 0x8, 0xfffffff8, 0x10, 0x8, 0x3, 0x6, 0x0, 0x6, 0x8, 0xe, 0x9, 0x8, 0x0, 0x7f, 0x7, 0x80, 0x4, 0x0, 0x6, 0x59ab, 0x7f, 0x3, 0x23, 0x5, 0xd, 0x3, 0x0, 0x4, 0xfff, 0xffffff80, 0x3, 0x4, 0x4, 0x8, 0x3, 0x0, 0xa, 0x7fffffff, 0x7, 0x5, 0xfffffffc, 0xb5, 0x2, 0x0, 0x2, 0xbf5, 0xfffff916, 0x1, 0x8000, 0x7, 0x6, 0x6, 0x2d, 0x1000, 0x5, 0x4, 0x82e2, 0x200, 0x901, 0x7, 0x6, 0x1, 0x5, 0x5, 0x101, 0x0, 0x73fa, 0x4, 0x54fc, 0xa4, 0x1, 0x6, 0xfffffffa]}) (async) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000001140)={0x0, {}, 0x0, {}, 0x8, 0x6, 0xc, 0x11, "91e7269c3c6ae557ec1240c66cc3f53e9f39d0cc6c5a3d4a82402472c10ea608b004318cc04c5f8fd2068f5e1a176dd39587004dfc48ebe65d3494b7c918781f", "ceba760d273cd6e2e56f906cc12405ea8b320eb8e92e04debf8117f0d17dd4b4", [0x2, 0x8]}) (async) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000001200)=0x6f) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000001240)={0x0, 0x0, {0xc8, 0x9, 0x3004, 0x0, 0x6, 0x8, 0x2, 0x2}}) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x6) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000012c0)={{0x0, 0x0, 0x80}}) ioctl$int_out(r2, 0x5462, &(0x7f0000003340)) (async) ioctl$RFKILL_IOC_MAX_SIZE(r2, 0x2, &(0x7f0000003380)=0x5) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000033c0), 0x84800, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000003400), 0x5, 0x10800) ioctl$UI_DEV_CREATE(r4, 0x5501) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000003480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003440)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000034c0)={0x7, 0x8, 0xfa00, {r5, 0xaa1}}, 0x10) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000003500)={0x0, {0x0, 0x3}}) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003540), 0x400000, 0x0) preadv(r6, &(0x7f0000003680)=[{&(0x7f0000003580)=""/203, 0xcb}], 0x1, 0x8, 0x99) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000036c0)={0x0, 0x2, @stop_pts=0x7}) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000003740)=0x1) (async) read(r3, &(0x7f0000003780)=""/81, 0x51) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000003800)={0x9, 0x7, 0x2, 0x5, 0x0, [0xffffff98, 0x2, 0x401, 0x6]}) 1.602477856s ago: executing program 7 (id=10972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 1.480158787s ago: executing program 6 (id=10973): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x0, 0x86) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x8000, 0x210000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1.466560653s ago: executing program 7 (id=10974): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7aa, &(0x7f0000000180)={{@any, 0xffffffff}}) read$FUSE(r1, 0x0, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) (async) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1.304959411s ago: executing program 3 (id=10975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x11}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f000017c000/0x1000)=nil, 0x1000, 0xa, 0x30, r3, 0x8c63e000) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000080)={0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f00000001c0)={0x1f, 0xa5fb}) 1.228554053s ago: executing program 6 (id=10976): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8c1, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0xb, 0x82) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x3, 0x6, &(0x7f00000000c0)={0x1a, "f386ec853a707324008c97c35f6454a51a720bf592580a4f356b5f3305b59b7b80"}}) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1837, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000001c0)={0x1, 0x5e, 0x1, &(0x7f0000000180)={0x13, "48bfc984a0c47a516eb11bc19126b77ec217e9d97dd38b2dbd78ca3b9989271e38"}}) write$sndseq(r2, &(0x7f0000000200)=[{0x5, 0x81, 0x5, 0x9, @time={0x0, 0x4}, {0x4}, {0x6, 0x1}, @control={0xc, 0xff, 0x100}}, {0x1, 0x2, 0x1, 0xf9, @tick=0x7, {0x9, 0x5}, {0x1, 0xc}, @queue={0x8, {0x4, 0x1}}}, {0x5, 0x1, 0x5, 0x7, @time={0x10, 0x7}, {0x5, 0x81}, {0x6, 0x3}, @control={0x1, 0x9, 0x4}}, {0x9, 0x6, 0x45, 0x6, @tick=0x8, {0x1, 0x5}, {0x8, 0x1}, @result={0x8a}}], 0x70) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x0, 0x3, 0x2, &(0x7f0000000280)={0x1a, "c32d979806a75fb6c2abcf549b9d96f305e100e16a330c0fa901c6684dd808b7ca"}}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x4, 0x5}}, './file0\x00'}) write$sndseq(r3, &(0x7f0000000380)=[{0xfa, 0x5, 0xc, 0x1, @time={0x8, 0xfffffffd}, {0x2, 0x8}, {0x5, 0x9}, @addr={0x1, 0xf}}], 0x1c) write$sndseq(r2, &(0x7f0000000400)=[{0xce, 0x81, 0x1, 0x4, @tick=0x1, {0x4, 0x7f}, {0xa3, 0x10}, @connect={{0x1, 0x5}, {0x0, 0x1}}}, {0x7, 0x8, 0xb, 0xf, @tick=0x4, {0x0, 0xff}, {0x9, 0x1}, @raw32={[0x1, 0x3, 0x1]}}, {0x5, 0x8a, 0x81, 0x2, @tick=0x7, {0xcf}, {0xf9, 0x2}, @time=@tick=0x5}, {0x45, 0xa2, 0xc8, 0x3, @time={0xe, 0x3}, {0x6, 0x6}, {0x50, 0x1}, @queue={0x5, {0x5, 0x10000}}}, {0x63, 0xfd, 0xfc, 0x5, @time={0x9, 0xffffb002}, {0x7f, 0x80}, {0x94, 0xec}, @quote={{0x6, 0x2}, 0x4, &(0x7f00000003c0)={0x7, 0x81, 0xe8, 0x6, @time={0x2, 0x8}, {0x10, 0xf8}, {0x8, 0x7}, @addr={0x2, 0x14}}}}], 0x8c) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8280) write$sndseq(r5, &(0x7f0000000500)=[{0x5, 0x7, 0x90, 0x5, @tick=0x88, {0xc, 0x8}, {0x6, 0x6}, @time=@tick=0xffffffff}, {0x6, 0x0, 0x2, 0x1, @tick=0x58c, {0x1, 0x6e}, {0xfc, 0x9}, @quote={{0x4, 0x8}, 0x844a}}, {0x5, 0x1, 0x3, 0x9, @tick=0x1, {0x3, 0xa}, {0xa, 0x9}, @raw8={"591adc595e2627bbe30aab8d"}}, {0xf2, 0xb9, 0x7, 0x45, @time={0x28, 0x6}, {0x16}, {0x8, 0x2}, @addr={0xe, 0xda}}, {0x56, 0x8, 0xfc, 0xf, @tick=0x40, {0x1, 0x2}, {0xf2, 0xf}, @queue={0x2, {0x0, 0x5}}}], 0x8c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000005c0)={0x11, @tick=0xe56, 0xf0, {0xfa, 0x3}, 0x23}) write$sndseq(r4, &(0x7f0000000840)=[{0xf, 0xc, 0x2, 0x4, @time={0x1, 0x4}, {0x10, 0x8}, {0x5, 0x5}, @ext={0xe6, &(0x7f0000000600)="50885130ee7105fbe0b286f4c50e98848fad5667127c3050f5761236dd7ece3bc72b5de7ec7a0b5efda709e6c237c73140e23c42d53822220bc0d8806272c53c9d42f544032e818b6fb8442768ecc69c23f1f3131bac67c723f6dbd80774030208bb5716994eace5206bcfea6ae88cac52c09562b34f081cd211053fb7363205ff86ed46c1f72d9b2c61c3756fc473955bf811e8b22503cde24405be169245f9604ebd1b088bb295095c5407a9f9698827ec5ed8859733bbcecf8d3e5d3aa44d99a300f8599e1b3d8315314c2fda9f641c6dfaa06165dcbe87c930f290e8cd083df1b5375c21"}}, {0x8, 0x6, 0x9f, 0x16, @time={0x2, 0x2}, {0x7, 0x8}, {0xf6, 0x8}, @ext={0x76, &(0x7f0000000700)="069443b20c11d3b6112f2829505ac16f9559060dbe1a82cbe68b866cafd4e7b44cb24552a196955cb2928149327bbc8b0dff73b523d8056c5ecf891218a61473d9a497130c0a3a4bdca55f294ebf2195aa72a85c2127d763614b2cb333b9b1aab0511254a8b644d930b89f509b56e5a2b08a77a00150"}}, {0x9, 0x4, 0x6, 0x6, @tick=0xffff, {0x42, 0x10}, {0x6, 0xc2}, @raw32={[0x530, 0x80, 0x2000000]}}, {0x80, 0x0, 0xfa, 0x80, @time={0x3, 0x2}, {0x1, 0x2}, {0x0, 0x6}, @quote={{0x7d, 0x6}, 0x571, &(0x7f0000000780)={0x82, 0x4, 0x0, 0xb, @time={0x7}, {0x1, 0xa}, {0xb, 0x2}, @quote={{0x4}, 0x1}}}}, {0x0, 0x8, 0x2, 0xfc, @time={0x9, 0x6}, {0x97, 0x7}, {0x4, 0x3}, @ext={0x28, &(0x7f00000007c0)="ba964653a58e2f37376ea2174817d2df9f6cd5863a090b96c199537e3e08235e514b0fa78b423b0e"}}, {0x4, 0x56, 0xf8, 0x5, @time={0x9, 0x1}, {0x2, 0x3}, {0x9, 0x6}, @addr={0x4}}, {0x1, 0x6, 0x0, 0x4, @time={0x713b, 0x8001}, {0x8, 0x1}, {0x9, 0x2}, @quote={{0x4, 0xf9}, 0x7fff, &(0x7f0000000800)={0x4, 0x28, 0x9, 0x3, @time={0x57, 0x7fffffff}, {0x6, 0xf}, {0x4, 0x9}, @control={0x81, 0x4, 0x2}}}}], 0xc4) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x224000, 0x0) write(r6, &(0x7f0000000980)="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", 0x1000) write$sndseq(r3, &(0x7f00000019c0)=[{0x9, 0x8, 0x1, 0x9, @tick, {0x1, 0xad}, {0x6, 0x5}, @control={0x2, 0xfff, 0x5}}, {0x0, 0x6, 0x2, 0x5, @tick=0x3, {0xe2, 0x6b}, {0xf4, 0x9}, @control={0x4d, 0x4, 0xfffffff7}}, {0x8, 0x3, 0x5c, 0x0, @tick=0xfffffff9, {0xb1, 0x3}, {0x1, 0x39}, @quote={{0x13, 0x2}, 0x9, &(0x7f0000001980)={0x7, 0x5, 0x0, 0x2, @time={0x40, 0xa}, {0x8, 0x1}, {0x4, 0x6}, @raw32={[0x453, 0x0, 0x100]}}}}, {0x3, 0x8, 0x3, 0x4, @time={0x4, 0x7ff}, {0xe, 0x3}, {0x30, 0x5}, @time=@time={0xd45c, 0x9}}], 0x70) preadv(r6, &(0x7f0000001c80)=[{&(0x7f0000001a40)=""/192, 0xc0}, {&(0x7f0000001b00)=""/119, 0x77}, {&(0x7f0000001b80)=""/121, 0x79}, {&(0x7f0000001c00)=""/80, 0x50}], 0x4, 0xb698, 0xfffffffa) write$cgroup_subtree(r4, &(0x7f0000001cc0)={[{0x2b, 'perf_event'}, {0x2d, 'cpuacct'}, {0x2d, 'io'}]}, 0x19) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_open_dev$amidi(&(0x7f0000001d00), 0x7, 0x3012c0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001d40), 0x800, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000001d80)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000001dc0)={{0x2, 0x1, 0x4, 0x2, 0x80000000}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000001e00)={0x1, 0x0, @pic={0x1, 0xfe, 0x34, 0x6, 0x4, 0xfd, 0x97, 0x7f, 0x4, 0x3, 0xf1, 0x5, 0x1, 0x9, 0x9, 0x9e}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000002040)) 1.055992725s ago: executing program 7 (id=10977): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x80201) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r2 = syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "207d3d0040b6000900"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x5) ioctl$TCGETA(r4, 0x8924, &(0x7f0000000080)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x4a}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x43, 0x13, 0xde9e, 0xe737, "75247f3e9d6419fc68927b1eb4fea71ef81400a0bac13cb442bdb91f1eeb9890"}) read$FUSE(r1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 1.054158061s ago: executing program 6 (id=10978): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0xfffffffffffffffd, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x7}}, {0x0, 0x1a}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000313415a305e6ff8fe38be6e90c4b76b587259d96b34be799af7a12f5b8835d9313f7c916f8334092cc29dfd567322727cc45b2c9e2683e20bd0e0d8b3be9f6747c82853cd48493840644f1701d8c260ba8aa33e1dfd45115126db894cdf5dda2a1f8e759eb162bb6d4836c271719dba19e8527dcc48ad8d8bab7a9e43b8dbd85d45848f4e96c7763a5d53d4c5986bd94b605a14854a1c2f83efd5746151cd781b09042d2d3816aa308d8b4ae7615f3b25a2e553b531edb8a0de8a6d0a97520cd594f1e173d6b6e1e05873a6240c0fc735c55e0"]) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x3, 0x7fbf}) r6 = dup(r2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000000)={0xa, 0x3, 0x0, {0x42, 0x1ff, 0x40000002, 0x2006}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0xf6a0d000) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r10, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) r11 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x181000, 0x0) ioctl$TIOCNOTTY(r11, 0x5422) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 778.328177ms ago: executing program 3 (id=10979): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8bee, 0x0, "87d3865187b8c6f0a84af6a637903184033c67"}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000440)={{0x4000, 0x0, 0x43cb, 0x8}, 'syz0\x00', 0x22}) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000001940)={'syz0\x00', {0x7, 0x5, 0x7, 0x4}, 0x15, [0xfffffffe, 0x4, 0x7, 0x80, 0x9, 0x7, 0x1, 0x9, 0x8, 0x8, 0x80, 0x2, 0x0, 0x3, 0x9, 0x6, 0xa1, 0x1, 0x3, 0x8, 0x40, 0x3, 0xffff, 0x7, 0x101, 0x805, 0x6, 0x0, 0x1, 0x4, 0x40000006, 0x0, 0x6, 0x5, 0x9, 0x877, 0x5, 0x7, 0xf17, 0x870b, 0x10, 0xae, 0x1, 0x8, 0x4, 0xffffffee, 0x7fe0000, 0x200, 0x9, 0xc, 0x80000000, 0x54, 0x8, 0x2, 0x54c2, 0x7, 0x643e1dbc, 0x3d3, 0xeb2, 0xc, 0x10000, 0x1, 0x9f8b, 0x8], [0x4, 0x6, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x1, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x0, 0x4033, 0x6, 0x0, 0x8, 0x1, 0x0, 0x4, 0x2, 0x7, 0x1, 0x9, 0x2, 0x10, 0x100, 0x5, 0xac, 0xc, 0x1, 0x40, 0x6, 0x3, 0xfffffffe, 0x6, 0xf23, 0xe, 0x69, 0x9, 0x0, 0xfffffffb, 0x5, 0x1ff, 0x8, 0x401, 0x7ff, 0x7d, 0x1, 0x4, 0x2, 0xd218, 0xce, 0x6a8, 0x5d52cbeb, 0x5, 0x4, 0xfffffffd, 0x80, 0xc0, 0x4, 0x5, 0x2, 0x6], [0x10001, 0x4, 0x3, 0x7, 0x3, 0x6, 0x5, 0x2, 0x7ff, 0x7, 0x7, 0x9, 0xffff, 0x3, 0x0, 0x3, 0x5, 0x1, 0x7, 0x1, 0x4, 0x1, 0x0, 0x7, 0xb, 0x6, 0x6, 0x66c2, 0x8, 0x81, 0x1, 0xe4b6, 0x0, 0x0, 0x3, 0x8aa541a, 0x0, 0x16, 0x5, 0x20, 0x10, 0x6, 0x8001, 0x400, 0x7, 0x8, 0x7, 0xf68, 0x8000, 0x4, 0x2, 0x2, 0x8000, 0x7f, 0x7, 0x80, 0x2685, 0x9, 0x6, 0x7fffffff, 0x8000, 0x7a, 0x3ff, 0xc], [0x9, 0x3, 0x7ff, 0xe, 0x7f, 0x10, 0x6, 0xcd9, 0x2, 0x5, 0x10001, 0x3, 0x4, 0x8001, 0x1000, 0x40, 0x0, 0x5, 0x3ff, 0xa13, 0x1ff, 0x0, 0x2, 0x0, 0x2, 0xa9, 0x6, 0x0, 0x1, 0x7, 0x2, 0x1, 0x7, 0xb735, 0x100, 0xc78, 0x1, 0x888, 0x1, 0xdd9, 0x1ff, 0x0, 0x7f, 0x2, 0x9, 0x9, 0x3, 0x8, 0x7, 0xfffffff1, 0xfffffffa, 0x6, 0xffffff86, 0x7, 0x1, 0xffffffff, 0x6, 0x7f, 0x2, 0x2, 0x1000, 0x1, 0x7fff, 0x81]}, 0x45c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) 637.028785ms ago: executing program 3 (id=10980): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) syz_open_dev$dri(&(0x7f0000000080), 0xd094, 0x20000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000efb000/0x4000)=nil, 0x4000, 0x1000006, 0x400e012, r1, 0xa4e6f000) (async) mmap(&(0x7f0000efb000/0x4000)=nil, 0x4000, 0x1000006, 0x400e012, r1, 0xa4e6f000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x4004e502, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x4004e502, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000feff000000000000000000000700000000000000"]) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x35315241}}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xffff1000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x2}, {0x5000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r5, 0x34ad8000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r5, 0x34ad8000) 436.05948ms ago: executing program 3 (id=10981): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) (async) r0 = syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x103241) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000280)={0x0, 0x9e, 0x3, 0x0, 0x81}) (async) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) (async) close(r1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r8, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x1, 0x159c2, 0x4}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESOCT]) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000080)) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000040)=ANY=[@ANYRES16=r4]) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r10, 0x3ba0, &(0x7f0000000f40)={0x48, 0x1, r11, 0x0, 0xfffffffffffffffd}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r11, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r12, 0x7dfff000) 435.465566ms ago: executing program 7 (id=10982): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) (async) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 367.14442ms ago: executing program 3 (id=10983): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) syz_open_dev$midi(&(0x7f0000000000), 0x9, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/179, 0xb3}], 0x2, 0x6, 0x0, 0x8) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x6, 0x5af, 0xab1}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 194.401616ms ago: executing program 3 (id=10984): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x1) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 0s ago: executing program 7 (id=10985): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) dup(r5) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x5a051feb1f984a1d, 0x202812, r6, 0x7dfff000) kernel console output (not intermixed with test programs): 7.473733][ T5156] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1147.476126][ T5845] Bluetooth: hci5: command 0xfc11 tx timeout [ 1148.050583][ T779] chnl_net:caif_netlink_parms(): no params data found [ 1148.206082][ T1101] syz.7.9052: attempt to access beyond end of device [ 1148.206082][ T1101] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1148.230556][ T1108] input input275: cannot allocate more than FF_MAX_EFFECTS effects [ 1148.315847][ T1026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1148.336935][ T13] bridge_slave_1: left allmulticast mode [ 1148.352770][ T1026] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1148.363209][ T13] bridge_slave_1: left promiscuous mode [ 1148.370598][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.485052][ T13] bridge_slave_0: left allmulticast mode [ 1148.490983][ T13] bridge_slave_0: left promiscuous mode [ 1148.518686][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.021183][ T1143] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1149.799042][ T1172] Falling back ldisc for ttyprintk. [ 1150.167319][ T1187] program syz.8.9059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.187475][ T1187] program syz.8.9059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.223604][ T1187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1150.346969][ T1187] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1150.354561][ T1187] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1151.077431][ T1197] Scaler: ================= START STATUS ================= [ 1151.085025][ T1197] Scaler: ================== END STATUS ================== [ 1151.275246][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.374235][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.414962][ T13] bond0 (unregistering): Released all slaves [ 1151.696000][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1151.904809][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.911973][ T779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.954433][ T779] bridge_slave_0: entered allmulticast mode [ 1151.962138][ T779] bridge_slave_0: entered promiscuous mode [ 1151.985948][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.993170][ T779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.000715][ T779] bridge_slave_1: entered allmulticast mode [ 1152.011992][ T779] bridge_slave_1: entered promiscuous mode [ 1152.242424][ T1286] QAT: failed to copy from user cfg_data. [ 1152.308179][ T779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.507946][ T779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.713828][ T13] hsr_slave_0: left promiscuous mode [ 1152.773927][ T13] hsr_slave_1: left promiscuous mode [ 1152.795314][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.817310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.857685][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.868756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.961881][ T13] veth1_macvtap: left promiscuous mode [ 1152.983670][ T13] veth0_macvtap: left promiscuous mode [ 1152.989363][ T13] veth1_vlan: left promiscuous mode [ 1153.002280][ T13] veth0_vlan: left promiscuous mode [ 1153.703728][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 1153.710299][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1155.214433][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1155.454168][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1158.024433][ T1376] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1158.102165][ T779] team0: Port device team_slave_0 added [ 1158.133092][ T779] team0: Port device team_slave_1 added [ 1158.406774][ T779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.429829][ T779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.515052][ T779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.539359][ T779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.554507][ T779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.637637][ T779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.482580][ T779] hsr_slave_0: entered promiscuous mode [ 1159.514520][ T779] hsr_slave_1: entered promiscuous mode [ 1159.829185][ T1641] binder: 1640:1641 ioctl c0306201 2000000003c0 returned -14 [ 1159.861226][ T1641] binder: 1640:1641 ioctl 400c620e 200000000180 returned -22 [ 1161.740946][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 1161.761907][ T1784] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1162.405901][ T779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1162.859805][ T779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1162.927044][ T779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1163.271835][T23824] hid-generic 009C:0008:0003.0018: unknown main item tag 0x7 [ 1163.271881][T23824] hid-generic 009C:0008:0003.0018: unknown main item tag 0x6 [ 1163.271907][T23824] hid-generic 009C:0008:0003.0018: unknown main item tag 0x0 [ 1163.271932][T23824] hid-generic 009C:0008:0003.0018: unknown main item tag 0x0 [ 1163.290729][T23824] hid-generic 009C:0008:0003.0018: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1163.340475][ T30] audit: type=1804 audit(1750370062.282:42): pid=1877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.9114" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=391 res=1 errno=0 [ 1163.340529][ T30] audit: type=1800 audit(1750370062.282:43): pid=1877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9114" name="cgroup.controllers" dev="tmpfs" ino=391 res=0 errno=0 [ 1163.560564][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.628409][ T779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1163.783577][ T5156] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1163.817484][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.185537][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.418952][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.534318][ T779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.597962][ T779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.661512][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.668724][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.769671][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.776886][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.976363][ T13] bridge_slave_1: left allmulticast mode [ 1164.987972][ T13] bridge_slave_1: left promiscuous mode [ 1165.000556][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.099201][ T13] bridge_slave_0: left allmulticast mode [ 1165.114686][ T13] bridge_slave_0: left promiscuous mode [ 1165.142868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.324867][ T1957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.705029][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1167.774346][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1167.879811][ T13] bond0 (unregistering): Released all slaves [ 1169.251337][ T2116] syz.7.9146: attempt to access beyond end of device [ 1169.251337][ T2116] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1169.523508][ T13] hsr_slave_0: left promiscuous mode [ 1169.538263][ T30] audit: type=1800 audit(1750370068.482:44): pid=2125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.9148" name="dmabuf" dev="dmabuf" ino=57 res=0 errno=0 [ 1169.623647][ T13] hsr_slave_1: left promiscuous mode [ 1169.629762][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.657666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.686532][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.706006][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.797700][ T2132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.819392][ T13] veth1_macvtap: left promiscuous mode [ 1169.833942][ T13] veth0_macvtap: left promiscuous mode [ 1169.839603][ T13] veth1_vlan: left promiscuous mode [ 1169.853619][ T13] veth0_vlan: left promiscuous mode [ 1170.450025][ T2151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.509350][ T2203] CUSE: info not properly terminated [ 1172.175554][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1172.405164][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1174.939447][ T779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.545161][ T2279] input: syz1 as /devices/virtual/input/input276 [ 1175.760615][ T779] veth0_vlan: entered promiscuous mode [ 1175.808405][ T779] veth1_vlan: entered promiscuous mode [ 1176.065570][ T779] veth0_macvtap: entered promiscuous mode [ 1176.152360][ T779] veth1_macvtap: entered promiscuous mode [ 1176.210050][ T779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.306305][ T779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.337144][ T779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.375593][ T779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.397779][ T779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.437143][ T779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.903006][ T974] Bluetooth: hci4: Frame reassembly failed (-84) [ 1176.927207][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.955878][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.042845][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.062999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.229973][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.238467][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.512080][ T2397] program syz.6.9176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1177.872811][ T2422] sd 0:0:1:0: device reset [ 1178.396313][ T2454] Bluetooth: hci5: Frame reassembly failed (-84) [ 1178.412365][ T974] Bluetooth: hci5: Frame reassembly failed (-84) [ 1178.903568][ T5845] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1178.903586][ T2458] Bluetooth: hci4: command 0x1003 tx timeout [ 1179.655909][ T2458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1179.674730][ T2458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1179.683177][ T2458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1179.693561][ T2458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1179.701210][ T2458] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1179.720458][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1179.751847][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1179.767876][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1179.790781][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1179.804151][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1179.878368][ T2588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.959248][ T2587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1180.426306][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 1180.429220][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1180.505282][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.866528][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.294931][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.628607][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.865540][ T5156] Bluetooth: hci1: command tx timeout [ 1182.228851][ T13] bridge_slave_1: left allmulticast mode [ 1182.237318][ T13] bridge_slave_1: left promiscuous mode [ 1182.250938][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.449164][ T13] bridge_slave_0: left allmulticast mode [ 1182.467492][ T13] bridge_slave_0: left promiscuous mode [ 1182.484149][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.498831][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.510898][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.529216][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.543382][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.557246][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.583977][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.591737][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.619224][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.641291][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.666418][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.675530][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.683494][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.691249][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.709789][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735423][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735452][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735477][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735502][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735526][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735551][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735576][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735600][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735625][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735649][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735674][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735698][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735723][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735747][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735771][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735795][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735819][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735843][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735867][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735891][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735915][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735939][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735964][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.735988][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736013][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736037][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736061][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736085][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736109][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736134][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736158][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736180][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736212][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736237][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736261][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736286][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736308][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736331][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736355][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736376][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736399][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736423][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736447][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736471][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736496][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736520][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736543][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736568][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736591][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736615][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736638][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736662][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736686][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736708][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736730][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736755][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736778][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736801][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736826][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736851][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736874][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736898][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736921][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736945][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736970][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.736995][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737021][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737045][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737070][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737095][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737120][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737144][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737169][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737202][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737226][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737252][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737278][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737304][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737329][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737353][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737378][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737404][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737429][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737452][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737476][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737500][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737525][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737549][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737574][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737598][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737623][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737647][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737671][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737695][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737719][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737744][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737770][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737794][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737819][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737844][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737869][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737894][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737918][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737942][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737968][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.737992][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738017][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738041][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738065][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738091][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738116][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738141][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738166][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738198][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738222][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738247][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738270][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738294][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738318][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738343][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738367][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738391][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738416][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738439][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738463][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738487][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738512][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738536][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738559][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738584][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738609][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738634][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738658][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738683][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738709][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738734][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738758][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738784][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738809][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738833][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738858][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738884][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738910][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738936][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738959][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.738983][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739006][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739029][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739053][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739076][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739100][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739124][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739147][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739172][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.739205][T11181] hid-generic 0008:0000:FFFFFBFF.0019: unknown main item tag 0x0 [ 1182.741679][T11181] hid-generic 0008:0000:FFFFFBFF.0019: hidraw0: HID v9.86 Device [syz0] on syz1 [ 1183.172991][ T2924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.953564][ T5156] Bluetooth: hci1: command tx timeout [ 1185.664652][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.734295][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.785320][ T13] bond0 (unregistering): Released all slaves [ 1185.841310][ T2555] chnl_net:caif_netlink_parms(): no params data found [ 1186.263557][ T5156] Bluetooth: hci1: command tx timeout [ 1186.348124][ T2912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1186.357976][ T2912] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1186.677068][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.706735][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.731229][ T2555] bridge_slave_0: entered allmulticast mode [ 1186.744339][ T2555] bridge_slave_0: entered promiscuous mode [ 1186.859927][ T3044] vivid-000: disconnect [ 1186.912432][ T3045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.974469][ T3043] vivid-000: reconnect [ 1187.008721][ T2555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.030815][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.117306][ T2555] bridge_slave_1: entered allmulticast mode [ 1187.140112][ T2555] bridge_slave_1: entered promiscuous mode [ 1187.423950][ T3085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1187.496250][ T13] hsr_slave_0: left promiscuous mode [ 1187.595589][ T13] hsr_slave_1: left promiscuous mode [ 1187.601579][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.633443][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.675903][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.710921][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.840878][ T13] veth1_macvtap: left promiscuous mode [ 1187.853695][ T13] veth0_macvtap: left promiscuous mode [ 1187.859467][ T13] veth1_vlan: left promiscuous mode [ 1187.870451][ T13] veth0_vlan: left promiscuous mode [ 1189.900854][ T3147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.908205][ T3145] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1190.214637][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1190.318455][ T3162] input: syz1 as /devices/virtual/input/input278 [ 1190.399801][ T3165] syz.6.9241: attempt to access beyond end of device [ 1190.399801][ T3165] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1190.464243][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1192.849248][ T2555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.916205][ T2555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.521061][ T2555] team0: Port device team_slave_0 added [ 1193.544354][ T2555] team0: Port device team_slave_1 added [ 1193.820379][ T2555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.833145][ T2555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.877704][ T2555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.968352][ T3264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.997910][ T2555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.007319][ T2555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.077131][ T2555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.422343][ T3312] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1194.571055][ T30] audit: type=1804 audit(1750370093.512:45): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.9249" name="/newroot/109/cgroup.controllers" dev="tmpfs" ino=572 res=1 errno=0 [ 1194.603896][ T30] audit: type=1800 audit(1750370093.542:46): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9249" name="cgroup.controllers" dev="tmpfs" ino=572 res=0 errno=0 [ 1194.632866][ T30] audit: type=1804 audit(1750370093.542:47): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.9249" name="/newroot/109/cgroup.controllers" dev="tmpfs" ino=572 res=1 errno=0 [ 1194.743753][ T2555] hsr_slave_0: entered promiscuous mode [ 1194.753142][ T2555] hsr_slave_1: entered promiscuous mode [ 1194.753776][ T3330] loop8: detected capacity change from 0 to 7 [ 1194.763984][ T2555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.781630][ T3330] Dev loop8: unable to read RDB block 7 [ 1194.787949][ T2555] Cannot create hsr debugfs directory [ 1194.789738][ T3330] loop8: unable to read partition table [ 1194.800248][ T3330] loop8: partition table beyond EOD, truncated [ 1194.806737][ T3330] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1196.612812][ T3500] loop8: detected capacity change from 0 to 7 [ 1196.622651][ T1457] Dev loop8: unable to read RDB block 7 [ 1196.654408][ T1457] loop8: unable to read partition table [ 1196.672805][ T1457] loop8: partition table beyond EOD, truncated [ 1196.694338][ T3500] Dev loop8: unable to read RDB block 7 [ 1196.700498][ T3500] loop8: unable to read partition table [ 1196.712160][ T3500] loop8: partition table beyond EOD, truncated [ 1196.719041][ T3500] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1196.921215][ T2555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1196.974645][ T2555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1197.049464][ T2555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1197.164034][ T2555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1197.651061][ T2555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.727465][ T2555] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.757981][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.765192][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.816670][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.823860][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.376248][ T3623] loop8: detected capacity change from 0 to 7 [ 1198.400743][ T3623] Dev loop8: unable to read RDB block 7 [ 1198.416434][ T2555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.424963][ T3623] loop8: unable to read partition table [ 1198.430809][ T3623] loop8: partition table beyond EOD, truncated [ 1198.452426][ T3623] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1198.508608][ T2555] veth0_vlan: entered promiscuous mode [ 1198.530526][ T2555] veth1_vlan: entered promiscuous mode [ 1198.599299][ T2555] veth0_macvtap: entered promiscuous mode [ 1198.622200][ T2555] veth1_macvtap: entered promiscuous mode [ 1198.663709][ T3637] input: syz0 as /devices/virtual/input/input279 [ 1198.669196][ T2555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.677500][ T3637] input: failed to attach handler leds to device input279, error: -6 [ 1198.716515][ T2555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.737729][ T2555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.752462][ T2555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.761685][ T2555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.771710][ T2555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.826409][ T3637] sp0: Synchronizing with TNC [ 1199.053825][ T3635] [U] è [ 1199.234252][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.265944][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.284700][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.292998][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.365471][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1199.392569][ T5845] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1199.406417][ T3696] random: crng reseeded on system resumption [ 1199.611145][ T3706] loop8: detected capacity change from 0 to 7 [ 1199.638973][ T1457] Dev loop8: unable to read RDB block 7 [ 1199.663423][ T1457] loop8: unable to read partition table [ 1199.669322][ T1457] loop8: partition table beyond EOD, truncated [ 1199.687099][ T3706] Dev loop8: unable to read RDB block 7 [ 1199.703867][ T3706] loop8: unable to read partition table [ 1199.709796][ T3706] loop8: partition table beyond EOD, truncated [ 1199.716738][ T3706] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1200.268315][ T3759] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1201.191704][ T3792] loop8: detected capacity change from 0 to 7 [ 1201.202270][ T3792] Dev loop8: unable to read RDB block 7 [ 1201.210386][ T3792] loop8: unable to read partition table [ 1201.217331][ T3792] loop8: partition table beyond EOD, truncated [ 1201.226832][ T3792] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1201.383524][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1201.383584][ T5845] Bluetooth: hci4: command 0x1003 tx timeout [ 1203.011755][ T3869] random: crng reseeded on system resumption [ 1203.227419][ T3878] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1203.368288][ T3886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.520408][ T3892] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1204.134647][ T3929] vivid-000: disconnect [ 1204.681770][ T3960] input input281: cannot allocate more than FF_MAX_EFFECTS effects [ 1204.730524][ T3924] vivid-000: reconnect [ 1204.913051][ T3974] loop8: detected capacity change from 0 to 7 [ 1204.937677][ T1457] Dev loop8: unable to read RDB block 7 [ 1204.951323][ T1457] loop8: unable to read partition table [ 1204.962316][ T1457] loop8: partition table beyond EOD, truncated [ 1205.017056][ T3974] Dev loop8: unable to read RDB block 7 [ 1205.023235][ T3974] loop8: unable to read partition table [ 1205.030011][ T3974] loop8: partition table beyond EOD, truncated [ 1205.038014][ T3974] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1205.318822][ T3993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.347084][ T3996] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1205.456978][ T4007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.610711][ T4025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.632336][T11181] hid (null): report_id 0 is invalid [ 1205.652280][T11181] hid-generic 1200:0001:0009.001A: unexpected long global item [ 1205.660698][T11181] hid-generic 1200:0001:0009.001A: probe with driver hid-generic failed with error -22 [ 1205.704425][ T4034] CUSE: info not properly terminated [ 1205.790883][ T4038] loop8: detected capacity change from 0 to 7 [ 1205.806149][ T1457] Dev loop8: unable to read RDB block 7 [ 1205.815192][ T1457] loop8: unable to read partition table [ 1205.823399][ T1457] loop8: partition table beyond EOD, truncated [ 1205.842297][ T4038] Dev loop8: unable to read RDB block 7 [ 1205.850070][ T4038] loop8: unable to read partition table [ 1205.857599][ T4038] loop8: partition table beyond EOD, truncated [ 1205.872108][ T4038] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1207.132278][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 1207.143841][ T4077] Bluetooth: hci4: Frame reassembly failed (-84) [ 1207.144022][ T4078] Bluetooth: hci4: Frame reassembly failed (-84) [ 1207.144186][ T4078] Bluetooth: hci4: Frame reassembly failed (-84) [ 1207.202528][ T4076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1207.269613][ T4094] loop8: detected capacity change from 0 to 7 [ 1207.298188][ T4094] Dev loop8: unable to read RDB block 7 [ 1207.316864][ T4094] loop8: unable to read partition table [ 1207.345283][ T4094] loop8: partition table beyond EOD, truncated [ 1207.361741][ T4094] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1207.415369][ T5205] Dev loop8: unable to read RDB block 7 [ 1207.435760][ T5205] loop8: unable to read partition table [ 1207.445013][ T5205] loop8: partition table beyond EOD, truncated [ 1209.098327][ T4165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1209.144017][ T5845] Bluetooth: hci4: command 0x1003 tx timeout [ 1209.155068][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1209.442170][ T4186] loop8: detected capacity change from 0 to 7 [ 1209.463818][ T4186] Dev loop8: unable to read RDB block 7 [ 1209.469431][ T4186] loop8: unable to read partition table [ 1209.477311][ T4186] loop8: partition table beyond EOD, truncated [ 1209.487584][ T4186] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1209.836529][ T4208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.631147][ T4247] vivid-003: ================= START STATUS ================= [ 1210.649058][ T4251] loop8: detected capacity change from 0 to 7 [ 1210.650761][ T4247] vivid-003: Radio HW Seek Mode: Bounded [ 1210.662729][ T1457] Dev loop8: unable to read RDB block 7 [ 1210.677207][ T4247] vivid-003: Radio Programmable HW Seek: false [ 1210.683847][ T1457] loop8: unable to read partition table [ 1210.689742][ T1457] loop8: partition table beyond EOD, truncated [ 1210.703860][ T4247] vivid-003: RDS Rx I/O Mode: Block I/O [ 1210.712966][ T4247] vivid-003: Generate RBDS Instead of RDS: false [ 1210.737450][ T4251] Dev loop8: unable to read RDB block 7 [ 1210.743593][ T4251] loop8: unable to read partition table [ 1210.748705][ T4247] vivid-003: RDS Reception: true [ 1210.765729][ T4247] vivid-003: RDS Program Type: 0 inactive [ 1210.766374][ T4251] loop8: partition table beyond EOD, truncated [ 1210.777699][ T4247] vivid-003: RDS PS Name: inactive [ 1210.777732][ T4247] vivid-003: RDS Radio Text: inactive [ 1210.806355][ T4251] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1210.807979][ T4247] vivid-003: RDS Traffic Announcement: false inactive [ 1210.870583][ T4247] vivid-003: RDS Traffic Program: false inactive [ 1210.912150][ T4247] vivid-003: RDS Music: false inactive [ 1210.942794][ T4247] vivid-003: ================== END STATUS ================== [ 1211.617231][ T4295] serio: Serial port ttynull [ 1211.737849][ T4303] kvm: kvm [4302]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 1213.066505][ T4353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.781726][ T4490] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1215.802138][ T4493] loop8: detected capacity change from 0 to 7 [ 1215.823965][ T1457] Dev loop8: unable to read RDB block 7 [ 1215.829573][ T1457] loop8: unable to read partition table [ 1215.838415][ T1457] loop8: partition table beyond EOD, truncated [ 1215.845643][ T4493] Dev loop8: unable to read RDB block 7 [ 1215.851938][ T4493] loop8: unable to read partition table [ 1215.862361][ T4493] loop8: partition table beyond EOD, truncated [ 1215.876393][ T4493] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1215.914099][ T4500] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1215.914099][ T4500] program syz.3.9404 not setting count and/or reply_len properly [ 1216.641581][ T4524] syz.7.9409: attempt to access beyond end of device [ 1216.641581][ T4524] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1217.322490][ T4553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1217.863698][ T4579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1218.023512][ T5156] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1218.023550][ T5845] Bluetooth: hci4: command 0xfc11 tx timeout [ 1218.504168][ T4601] input: syz1 as /devices/virtual/input/input282 [ 1219.480602][ T4654] input: syz1 as /devices/virtual/input/input284 [ 1219.742985][ T4675] [U]  [ 1219.745805][ T4675] [U] K{‘ [ 1219.748838][ T4675] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1219.755800][ T4675] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1219.771348][ T4675] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1219.781789][ T4675] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1219.817409][ T4675] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1219.840923][ T4675] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1219.852018][ T4675] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1219.863558][ T4675] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 1219.965158][ T4675] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1219.973645][ T4675] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1219.987164][ T4675] [U] 22½“Æ©Ðû©x?0;3u± [ 1219.991310][ T4675] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1220.016209][ T4675] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1220.025474][ T4675] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1220.034043][ T4675] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1220.040182][ T4675] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1220.052489][ T4675] [U] ¹ ec [ 1220.055592][ T4675] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1220.092146][ T4674] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1220.175062][ T4687] CUSE: info not properly terminated [ 1220.879954][ T3620] hid (null): report_id 0 is invalid [ 1220.905566][ T4731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.913576][ T3620] hid (null): unknown global tag 0xd [ 1220.933623][ T3620] hid (null): unknown global tag 0xd [ 1220.947989][ T3620] hid-generic 8000:0080:0009.001B: unknown main item tag 0x0 [ 1220.964792][ T3620] hid-generic 8000:0080:0009.001B: unexpected long global item [ 1220.984302][ T3620] hid-generic 8000:0080:0009.001B: probe with driver hid-generic failed with error -22 [ 1221.034665][ T4743] loop8: detected capacity change from 0 to 7 [ 1221.044806][ T4743] Dev loop8: unable to read RDB block 7 [ 1221.051156][ T4743] loop8: unable to read partition table [ 1221.070954][ T4743] loop8: partition table beyond EOD, truncated [ 1221.083421][ T4743] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1221.598200][ T4809] kvm: user requested TSC rate below hardware speed [ 1221.671167][ T4809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.326857][ T4917] program syz.3.9457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.383962][ T4921] program syz.3.9457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.414646][ T4921] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1222.430152][ T4921] QAT: failed to copy from user. [ 1222.440907][ T4923] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1222.601420][ T4928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.116727][ T4944] binder: 4943:4944 ioctl 40046205 0 returned -22 [ 1223.156147][ T30] audit: type=1400 audit(1750370122.102:48): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=4943 comm="syz.3.9462" [ 1223.262360][ T4952] usb usb8: usbfs: process 4952 (syz.6.9463) did not claim interface 0 before use [ 1223.348174][ T4953] input: syz1 as /devices/virtual/input/input285 [ 1223.513188][ T4964] loop8: detected capacity change from 0 to 7 [ 1223.521897][ T1457] Dev loop8: unable to read RDB block 7 [ 1223.528312][ T1457] loop8: unable to read partition table [ 1223.536054][ T1457] loop8: partition table beyond EOD, truncated [ 1223.545122][ T4964] Dev loop8: unable to read RDB block 7 [ 1223.551171][ T4964] loop8: unable to read partition table [ 1223.557532][ T4964] loop8: partition table beyond EOD, truncated [ 1223.567177][ T4964] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1223.859905][ T4978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.116149][ T4993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.133983][ T4993] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1224.145790][ T4993] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1224.242977][ T5010] loop8: detected capacity change from 0 to 7 [ 1224.353960][ T1566] Dev loop8: unable to read RDB block 7 [ 1224.359758][ T1566] loop8: unable to read partition table [ 1224.379266][ T1566] loop8: partition table beyond EOD, truncated [ 1224.414464][ T5010] Dev loop8: unable to read RDB block 7 [ 1224.420070][ T5010] loop8: unable to read partition table [ 1224.451734][ T5010] loop8: partition table beyond EOD, truncated [ 1224.474257][ T5010] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1225.400594][ T5055] loop8: detected capacity change from 0 to 7 [ 1225.446558][ T5055] Dev loop8: unable to read RDB block 7 [ 1225.462662][ T5055] loop8: unable to read partition table [ 1225.477406][ T5055] loop8: partition table beyond EOD, truncated [ 1225.504740][ T5055] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1225.973412][ T30] audit: type=1400 audit(1750370124.912:49): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2221D01A0B978D2F2F01 pid=5073 comm="syz.6.9487" [ 1227.043829][ T5131] blktrace: Concurrent blktraces are not allowed on sg0 [ 1227.062502][ T5131] blktrace: Concurrent blktraces are not allowed on sg0 [ 1227.492029][ T5160] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1227.916396][ T5196] syz.3.9512: attempt to access beyond end of device [ 1227.916396][ T5196] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1228.415359][ T5218] loop8: detected capacity change from 0 to 7 [ 1228.446606][ T1457] Dev loop8: unable to read RDB block 7 [ 1228.461402][ T1457] loop8: unable to read partition table [ 1228.482548][ T1457] loop8: partition table beyond EOD, truncated [ 1228.491565][ T5218] Dev loop8: unable to read RDB block 7 [ 1228.491609][ T5218] loop8: unable to read partition table [ 1228.491805][ T5218] loop8: partition table beyond EOD, truncated [ 1228.491824][ T5218] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1229.167355][ T5257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.199897][ T5263] random: crng reseeded on system resumption [ 1229.216483][ T5265] loop8: detected capacity change from 0 to 7 [ 1229.232963][ T1457] Dev loop8: unable to read RDB block 7 [ 1229.238995][ T1457] loop8: unable to read partition table [ 1229.246830][ T1457] loop8: partition table beyond EOD, truncated [ 1229.257967][ T5265] Dev loop8: unable to read RDB block 7 [ 1229.264465][ T5265] loop8: unable to read partition table [ 1229.270383][ T5265] loop8: partition table beyond EOD, truncated [ 1229.287908][ T5265] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1230.469569][ T5319] loop8: detected capacity change from 0 to 7 [ 1230.485675][ T5319] Dev loop8: unable to read RDB block 7 [ 1230.499442][ T5319] loop8: unable to read partition table [ 1230.510470][ T5319] loop8: partition table beyond EOD, truncated [ 1230.533613][ T5319] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1232.127882][ T5369] loop8: detected capacity change from 0 to 7 [ 1232.151418][ T1457] Dev loop8: unable to read RDB block 7 [ 1232.162908][ T1457] loop8: unable to read partition table [ 1232.175702][ T1457] loop8: partition table beyond EOD, truncated [ 1232.203476][ T5369] Dev loop8: unable to read RDB block 7 [ 1232.209100][ T5369] loop8: unable to read partition table [ 1232.215744][ T5369] loop8: partition table beyond EOD, truncated [ 1232.225312][ T5369] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1232.349846][ T5377] i2c i2c-0: Invalid block write size 34 [ 1232.616181][ T5391] CUSE: info not properly terminated [ 1233.041645][ T5406] sp0: Synchronizing with TNC [ 1233.069102][ T5405] sp0: Found TNC [ 1233.085694][ T5404] [U] è` [ 1233.388193][ T5427] dlm: non-version read from control device 8224 [ 1233.781298][ T5440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.549809][ T5483] loop8: detected capacity change from 0 to 7 [ 1234.570076][ T1457] Dev loop8: unable to read RDB block 7 [ 1234.576010][ T1457] loop8: unable to read partition table [ 1234.581904][ T1457] loop8: partition table beyond EOD, truncated [ 1234.592560][ T5483] Dev loop8: unable to read RDB block 7 [ 1234.598380][ T5483] loop8: unable to read partition table [ 1234.608183][ T5483] loop8: partition table beyond EOD, truncated [ 1234.615557][ T5483] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1235.415017][ T5535] loop8: detected capacity change from 0 to 7 [ 1235.417804][ T5535] Dev loop8: unable to read RDB block 7 [ 1235.417847][ T5535] loop8: unable to read partition table [ 1235.418043][ T5535] loop8: partition table beyond EOD, truncated [ 1235.418073][ T5535] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1236.875496][ T5582] input: syz1 as /devices/virtual/input/input286 [ 1236.930260][ T5587] loop8: detected capacity change from 0 to 7 [ 1236.944265][ T5587] Dev loop8: unable to read RDB block 7 [ 1236.949888][ T5587] loop8: unable to read partition table [ 1236.956465][ T5587] loop8: partition table beyond EOD, truncated [ 1236.962665][ T5587] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1237.912776][ T5633] loop8: detected capacity change from 0 to 7 [ 1237.941502][ T1457] Dev loop8: unable to read RDB block 7 [ 1237.955669][ T1457] loop8: unable to read partition table [ 1237.961552][ T1457] loop8: partition table beyond EOD, truncated [ 1237.991262][ T5633] Dev loop8: unable to read RDB block 7 [ 1238.004999][ T5633] loop8: unable to read partition table [ 1238.010893][ T5633] loop8: partition table beyond EOD, truncated [ 1238.034117][ T5633] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1238.672902][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.679743][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.706462][ T5680] CUSE: info not properly terminated [ 1239.735378][ T5734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.032617][ T5765] Context (ID=0x1) not attached to queue pair (handle=0x1:0x7) [ 1240.044105][ T5765] input: syz1 as /devices/virtual/input/input290 [ 1240.330836][ T5782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.825598][ T5818] dlm: no local IP address has been set [ 1240.831188][ T5818] dlm: cannot start dlm midcomms -107 [ 1241.288607][ T5844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.570650][ T5857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.788573][ T5879] input: syz0 as /devices/virtual/input/input291 [ 1242.661461][ T5923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.705484][ T5923] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1243.324738][ T5969] vivid-003: disconnect [ 1243.329694][ T5968] vivid-003: reconnect [ 1244.004176][ T6007] input: syz0 as /devices/virtual/input/input292 [ 1244.530397][ T6032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1245.223846][ T5845] Bluetooth: hci4: command 0xfc11 tx timeout [ 1245.231220][ T5156] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1245.750679][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1245.759710][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1245.767943][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1245.776389][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1245.792708][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1245.847422][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1245.859046][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1245.866661][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1245.881295][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1245.893007][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1246.556590][ T974] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.776674][ T974] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.944711][ T6124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.976375][ T6124] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1247.005229][ T6194] qrtr: Invalid version 43 [ 1247.046001][ T974] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.375628][ T974] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.808559][ T6079] chnl_net:caif_netlink_parms(): no params data found [ 1248.477468][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.489165][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.498243][ T6079] bridge_slave_0: entered allmulticast mode [ 1248.523548][ T6079] bridge_slave_0: entered promiscuous mode [ 1248.531459][ T974] bridge_slave_1: left allmulticast mode [ 1248.541632][ T974] bridge_slave_1: left promiscuous mode [ 1248.556866][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.645340][ T974] bridge_slave_0: left allmulticast mode [ 1248.651021][ T974] bridge_slave_0: left promiscuous mode [ 1248.674892][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.966349][ T6425] binder: 6423:6425 ioctl c0306201 2000000003c0 returned -14 [ 1250.998081][ T974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.065906][ T974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.081803][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.125834][ T974] bond0 (unregistering): Released all slaves [ 1251.160155][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.199391][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.207439][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.216982][ T6079] bridge_slave_1: entered allmulticast mode [ 1251.225030][ T6079] bridge_slave_1: entered promiscuous mode [ 1252.039771][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.088198][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.427234][ T6560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.851101][ T6600] program syz.6.9730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1253.005667][ T6079] team0: Port device team_slave_0 added [ 1253.029625][ T6079] team0: Port device team_slave_1 added [ 1253.263681][ T974] hsr_slave_0: left promiscuous mode [ 1253.361456][ T974] hsr_slave_1: left promiscuous mode [ 1253.407267][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.420873][ T974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.474342][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.503726][ T974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.512647][ T6630] dlm: no locking on control device [ 1253.646810][ T974] veth1_macvtap: left promiscuous mode [ 1253.652535][ T974] veth0_macvtap: left promiscuous mode [ 1253.662862][ T974] veth1_vlan: left promiscuous mode [ 1253.669225][ T974] veth0_vlan: left promiscuous mode [ 1255.796695][ T6704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.124811][ T974] team0 (unregistering): Port device team_slave_1 removed [ 1256.347751][ T974] team0 (unregistering): Port device team_slave_0 removed [ 1259.067242][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.087782][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.155750][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.169150][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.176429][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.202331][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.253396][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.776009][ T6079] hsr_slave_0: entered promiscuous mode [ 1259.782633][ T6079] hsr_slave_1: entered promiscuous mode [ 1259.836013][ T6079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.843784][ T6079] Cannot create hsr debugfs directory [ 1259.935937][ T6810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.924685][ T6992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.228255][ T7014] syz.6.9772: attempt to access beyond end of device [ 1262.228255][ T7014] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1262.546406][ T7030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.611432][ T7036] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1262.722686][ T6079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1262.800819][ T6079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1262.876027][ T6079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1262.926121][ T6079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1263.258115][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.317464][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.348621][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.355807][T12017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.449772][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.456955][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.137208][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.960753][ T6079] veth0_vlan: entered promiscuous mode [ 1264.967944][ T6079] veth1_vlan: entered promiscuous mode [ 1265.045705][ T6079] veth0_macvtap: entered promiscuous mode [ 1265.050105][ T6079] veth1_macvtap: entered promiscuous mode [ 1265.092485][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.136707][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.139620][ T6079] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.139651][ T6079] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.139676][ T6079] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.139702][ T6079] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.480072][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.514165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.618470][ T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.658616][ T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.421967][ T7226] loop8: detected capacity change from 0 to 7 [ 1266.463223][ T7226] Dev loop8: unable to read RDB block 7 [ 1266.477710][ T7226] loop8: unable to read partition table [ 1266.497522][ T7226] loop8: partition table beyond EOD, truncated [ 1266.511782][ T7226] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1267.849401][ T7405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.867714][ T7406] input: syz1 as /devices/virtual/input/input294 [ 1268.835542][ T7457] loop8: detected capacity change from 0 to 7 [ 1268.854622][ T7457] Dev loop8: unable to read RDB block 7 [ 1268.860232][ T7457] loop8: unable to read partition table [ 1268.904478][ T7457] loop8: partition table beyond EOD, truncated [ 1268.910852][ T7457] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1269.202108][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.349322][ T7625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1272.672084][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.695125][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.715864][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.741883][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.755918][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.791375][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.810310][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.826158][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.846080][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.863590][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.876567][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.892931][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.922159][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.940678][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.961451][T23824] hid-generic 009C:0008:0003.001C: unknown main item tag 0x0 [ 1272.994889][T23824] hid-generic 009C:0008:0003.001C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1273.033839][ T7663] QAT: Device 253 not found [ 1273.165892][ T7665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.527783][ T7683] i2c i2c-0: Invalid block write size 34 [ 1273.700518][ T7689] syz.3.9843: attempt to access beyond end of device [ 1273.700518][ T7689] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1273.733254][ T7691] loop8: detected capacity change from 0 to 7 [ 1273.748467][ T1457] Dev loop8: unable to read RDB block 7 [ 1273.754641][ T1457] loop8: unable to read partition table [ 1273.760564][ T1457] loop8: partition table beyond EOD, truncated [ 1273.774468][ T7691] Dev loop8: unable to read RDB block 7 [ 1273.792833][ T7691] loop8: unable to read partition table [ 1273.798839][ T7691] loop8: partition table beyond EOD, truncated [ 1273.805180][ T7691] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1274.903288][ T7744] loop8: detected capacity change from 0 to 7 [ 1274.914489][ T1457] Dev loop8: unable to read RDB block 7 [ 1274.923016][ T1457] loop8: unable to read partition table [ 1274.930225][ T1457] loop8: partition table beyond EOD, truncated [ 1274.949975][ T7744] Dev loop8: unable to read RDB block 7 [ 1274.959291][ T7744] loop8: unable to read partition table [ 1274.968290][ T7744] loop8: partition table beyond EOD, truncated [ 1274.975886][ T7744] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1275.796122][ T7795] sp0: Synchronizing with TNC [ 1275.987922][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.052383][ T7812] binder: 7802:7812 ioctl 40086607 200000000200 returned -22 [ 1276.185933][ T7802] ALSA: mixer_oss: invalid OSS volume '' [ 1276.251484][ T7818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1276.281407][ T7817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1276.358634][ T7833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.552282][ T7846] sp0: Synchronizing with TNC [ 1276.558468][ T7846] sp0: Found TNC [ 1277.464949][ T7841] [U] è` [ 1277.689442][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.305172][ T7931] CUSE: info not properly terminated [ 1279.007212][ T7967] binder: 7966:7967 ioctl c0306201 2000000003c0 returned -14 [ 1279.063560][ T7968] mkiss: ax0: crc mode is auto. [ 1279.555778][ T7998] block nbd7: NBD_DISCONNECT [ 1279.863239][ T8013] sp0: Synchronizing with TNC [ 1280.351084][ T8040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.376463][ T8040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.657557][ T8058] binder: 8051:8058 ioctl c0306201 200000000100 returned -22 [ 1282.610981][ T8151] input: syz1 as /devices/virtual/input/input299 [ 1285.268033][ T8252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1286.164460][ T8296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.605155][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.919293][ T8389] QAT: Invalid ioctl -805268450 [ 1288.219064][ T8413] loop8: detected capacity change from 0 to 7 [ 1288.262674][ T1457] Dev loop8: unable to read RDB block 7 [ 1288.272782][ T1457] loop8: unable to read partition table [ 1288.294362][ T1457] loop8: partition table beyond EOD, truncated [ 1288.301529][ T8413] Dev loop8: unable to read RDB block 7 [ 1288.313277][ T8413] loop8: unable to read partition table [ 1288.324299][ T8413] loop8: partition table beyond EOD, truncated [ 1288.330650][ T8413] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1288.615357][ T8430] CUSE: info not properly terminated [ 1288.714561][ T8436] binder: BINDER_SET_CONTEXT_MGR already set [ 1288.732408][ T8436] binder: 8431:8436 ioctl 4018620d 200000000080 returned -16 [ 1289.133858][ T8448] input: syz0 as /devices/virtual/input/input301 [ 1289.405865][ T8465] loop8: detected capacity change from 0 to 7 [ 1289.408951][ T8465] Dev loop8: unable to read RDB block 7 [ 1289.408986][ T8465] loop8: unable to read partition table [ 1289.409171][ T8465] loop8: partition table beyond EOD, truncated [ 1289.409191][ T8465] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1291.646842][ T8581] FAULT_INJECTION: forcing a failure. [ 1291.646842][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.669166][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.3.10017 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1291.669191][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1291.669202][ T8581] Call Trace: [ 1291.669211][ T8581] [ 1291.669218][ T8581] dump_stack_lvl+0x189/0x250 [ 1291.669242][ T8581] ? __pfx____ratelimit+0x10/0x10 [ 1291.669265][ T8581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1291.669284][ T8581] ? __pfx__printk+0x10/0x10 [ 1291.669309][ T8581] ? __pfx___might_resched+0x10/0x10 [ 1291.669327][ T8581] ? fs_reclaim_acquire+0x7d/0x100 [ 1291.669354][ T8581] should_fail_ex+0x414/0x560 [ 1291.669401][ T8581] should_failslab+0xa8/0x100 [ 1291.669424][ T8581] __kmalloc_noprof+0xcb/0x4f0 [ 1291.669442][ T8581] ? kfree+0x4d/0x440 [ 1291.669458][ T8581] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1291.669482][ T8581] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1291.669503][ T8581] ? tomoyo_domain+0xd9/0x130 [ 1291.669528][ T8581] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1291.669552][ T8581] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1291.669579][ T8581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1291.669618][ T8581] ? __lock_acquire+0xab9/0xd20 [ 1291.669655][ T8581] ? __fget_files+0x2a/0x420 [ 1291.669680][ T8581] ? __fget_files+0x2a/0x420 [ 1291.669700][ T8581] ? __fget_files+0x3a0/0x420 [ 1291.669720][ T8581] ? __fget_files+0x2a/0x420 [ 1291.669744][ T8581] security_file_ioctl+0xcb/0x2d0 [ 1291.669770][ T8581] __se_sys_ioctl+0x47/0x170 [ 1291.669793][ T8581] do_syscall_64+0xfa/0x3b0 [ 1291.669808][ T8581] ? lockdep_hardirqs_on+0x9c/0x150 [ 1291.669831][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.669848][ T8581] ? clear_bhb_loop+0x60/0xb0 [ 1291.669869][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.669886][ T8581] RIP: 0033:0x7f3b3f38e929 [ 1291.669903][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.669918][ T8581] RSP: 002b:00007f3b4020a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.669938][ T8581] RAX: ffffffffffffffda RBX: 00007f3b3f5b5fa0 RCX: 00007f3b3f38e929 [ 1291.669951][ T8581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1291.669962][ T8581] RBP: 00007f3b4020a090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.669974][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.669985][ T8581] R13: 0000000000000000 R14: 00007f3b3f5b5fa0 R15: 00007ffccc97e7b8 [ 1291.670014][ T8581] [ 1291.670064][ T8581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1291.897493][ T8604] sp0: Synchronizing with TNC [ 1293.161760][ T8762] FAULT_INJECTION: forcing a failure. [ 1293.161760][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.214790][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.7.10028 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1293.214815][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.214826][ T8762] Call Trace: [ 1293.214833][ T8762] [ 1293.214841][ T8762] dump_stack_lvl+0x189/0x250 [ 1293.214865][ T8762] ? __pfx____ratelimit+0x10/0x10 [ 1293.214888][ T8762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.214906][ T8762] ? __pfx__printk+0x10/0x10 [ 1293.214927][ T8762] ? __pfx___might_resched+0x10/0x10 [ 1293.214947][ T8762] ? fs_reclaim_acquire+0x7d/0x100 [ 1293.214973][ T8762] should_fail_ex+0x414/0x560 [ 1293.215000][ T8762] should_failslab+0xa8/0x100 [ 1293.215023][ T8762] __kmalloc_noprof+0xcb/0x4f0 [ 1293.215043][ T8762] ? tomoyo_encode+0x28b/0x550 [ 1293.215066][ T8762] tomoyo_encode+0x28b/0x550 [ 1293.215092][ T8762] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1293.215114][ T8762] ? tomoyo_domain+0xd9/0x130 [ 1293.215139][ T8762] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1293.215164][ T8762] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1293.215191][ T8762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1293.215232][ T8762] ? __lock_acquire+0xab9/0xd20 [ 1293.215268][ T8762] ? __fget_files+0x2a/0x420 [ 1293.215295][ T8762] ? __fget_files+0x2a/0x420 [ 1293.215315][ T8762] ? __fget_files+0x3a0/0x420 [ 1293.215336][ T8762] ? __fget_files+0x2a/0x420 [ 1293.215362][ T8762] security_file_ioctl+0xcb/0x2d0 [ 1293.215388][ T8762] __se_sys_ioctl+0x47/0x170 [ 1293.215410][ T8762] do_syscall_64+0xfa/0x3b0 [ 1293.215426][ T8762] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.215449][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.215466][ T8762] ? clear_bhb_loop+0x60/0xb0 [ 1293.215487][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.215520][ T8762] RIP: 0033:0x7f154818e929 [ 1293.215537][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.215550][ T8762] RSP: 002b:00007f154905a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.215569][ T8762] RAX: ffffffffffffffda RBX: 00007f15483b5fa0 RCX: 00007f154818e929 [ 1293.215582][ T8762] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1293.215593][ T8762] RBP: 00007f154905a090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.215605][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.215616][ T8762] R13: 0000000000000000 R14: 00007f15483b5fa0 R15: 00007ffdf742f578 [ 1293.215644][ T8762] [ 1293.215669][ T8762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.289493][ T8772] binder: 8770:8772 ioctl c0306201 2000000003c0 returned -22 [ 1294.470032][ T8818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1295.623453][ T5845] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1295.623817][ T5156] Bluetooth: hci4: command 0xfc11 tx timeout [ 1295.899713][ T8909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1297.420692][ T8974] input: syz0 as /devices/virtual/input/input303 [ 1297.897819][ T8994] FAULT_INJECTION: forcing a failure. [ 1297.897819][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.976114][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.8.10073 Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1297.976139][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1297.976150][ T8994] Call Trace: [ 1297.976157][ T8994] [ 1297.976165][ T8994] dump_stack_lvl+0x189/0x250 [ 1297.976198][ T8994] ? __pfx____ratelimit+0x10/0x10 [ 1297.976223][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1297.976241][ T8994] ? __pfx__printk+0x10/0x10 [ 1297.976272][ T8994] should_fail_ex+0x414/0x560 [ 1297.976298][ T8994] _copy_to_user+0x31/0xb0 [ 1297.976318][ T8994] simple_read_from_buffer+0xe1/0x170 [ 1297.976346][ T8994] proc_fail_nth_read+0x1df/0x250 [ 1297.976366][ T8994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1297.976387][ T8994] ? rw_verify_area+0x258/0x650 [ 1297.976407][ T8994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1297.976426][ T8994] vfs_read+0x1fd/0x980 [ 1297.976452][ T8994] ? __pfx___mutex_lock+0x10/0x10 [ 1297.976470][ T8994] ? __pfx_vfs_read+0x10/0x10 [ 1297.976491][ T8994] ? __fget_files+0x2a/0x420 [ 1297.976519][ T8994] ? __fget_files+0x3a0/0x420 [ 1297.976539][ T8994] ? __fget_files+0x2a/0x420 [ 1297.976570][ T8994] ksys_read+0x145/0x250 [ 1297.976588][ T8994] ? __fget_files+0x3a0/0x420 [ 1297.976610][ T8994] ? __pfx_ksys_read+0x10/0x10 [ 1297.976634][ T8994] ? do_syscall_64+0xbe/0x3b0 [ 1297.976655][ T8994] do_syscall_64+0xfa/0x3b0 [ 1297.976670][ T8994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1297.976693][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.976711][ T8994] ? clear_bhb_loop+0x60/0xb0 [ 1297.976731][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.976748][ T8994] RIP: 0033:0x7efd5f58d33c [ 1297.976763][ T8994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1297.976777][ T8994] RSP: 002b:00007efd604a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1297.976796][ T8994] RAX: ffffffffffffffda RBX: 00007efd5f7b5fa0 RCX: 00007efd5f58d33c [ 1297.976809][ T8994] RDX: 000000000000000f RSI: 00007efd604a70a0 RDI: 0000000000000008 [ 1297.976820][ T8994] RBP: 00007efd604a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.976830][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.976841][ T8994] R13: 0000000000000000 R14: 00007efd5f7b5fa0 R15: 00007ffe60081908 [ 1297.976868][ T8994] [ 1298.214030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.525977][ T8999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.656183][ T9021] binder: 9020:9021 ioctl c018620c 200000000380 returned -22 [ 1299.324984][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.128782][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.135450][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.664299][ T9099] CUSE: info not properly terminated [ 1300.684546][ T9099] CUSE: info not properly terminated [ 1301.646052][ T9144] usb usb8: usbfs: process 9144 (syz.6.10105) did not claim interface 0 before use [ 1302.696274][ T30] audit: type=1804 audit(1750370201.592:50): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10113" name="kvm-vcpu:0" dev="anon_inodefs" ino=1061 res=1 errno=0 [ 1305.516530][ T9390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1305.549369][ T9408] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1306.104799][ T9487] program syz.3.10147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.335063][ T9530] syz.3.10158: attempt to access beyond end of device [ 1307.335063][ T9530] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1307.426099][ T9532] binder_alloc: binder_alloc_mmap_handler: 9531 200000735000-200000736000 already mapped failed -16 [ 1307.668419][ T9548] input: syz1 as /devices/virtual/input/input307 [ 1308.008704][ T9569] usb usb1: usbfs: process 9569 (syz.7.10166) did not claim interface 0 before use [ 1308.187122][ T9586] dlm: non-version read from control device 14 [ 1308.558864][ T9594] mkiss: ax0: crc mode is auto. [ 1309.238944][ T9623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.645201][ T9648] CUSE: info not properly terminated [ 1311.326564][ T9705] binder: 9704:9705 ioctl 400c620e 2000000014c0 returned -22 [ 1312.298264][ T9737] loop8: detected capacity change from 0 to 7 [ 1312.324789][ T9737] Dev loop8: unable to read RDB block 7 [ 1312.331334][ T9737] loop8: unable to read partition table [ 1312.351181][ T9737] loop8: partition table beyond EOD, truncated [ 1312.371234][ T9737] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1313.437648][ T9805] usb usb3: usbfs: process 9805 (syz.7.10217) did not claim interface 0 before use [ 1313.726988][ T9818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1314.010489][ T9836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1314.777194][ T9869] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1314.782943][ T9869] pim6reg0: linktype set to 769 [ 1315.179611][ T9883] program syz.3.10231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1315.442254][ T9891] input: syz1 as /devices/virtual/input/input308 [ 1315.588670][ T9900] loop8: detected capacity change from 0 to 7 [ 1315.601831][ T1457] Dev loop8: unable to read RDB block 7 [ 1315.608198][ T1457] loop8: unable to read partition table [ 1315.616541][ T1457] loop8: partition table beyond EOD, truncated [ 1315.647420][ T9900] Dev loop8: unable to read RDB block 7 [ 1315.653015][ T9900] loop8: unable to read partition table [ 1315.687517][ T9900] loop8: partition table beyond EOD, truncated [ 1315.711750][ T9900] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1315.825606][ T9908] random: crng reseeded on system resumption [ 1316.221948][ T9927] block nbd8: NBD_DISCONNECT [ 1316.386154][ T9942] loop8: detected capacity change from 0 to 7 [ 1316.402886][ T9942] Dev loop8: unable to read RDB block 7 [ 1316.412894][ T9942] loop8: unable to read partition table [ 1316.439403][ T9942] loop8: partition table beyond EOD, truncated [ 1316.451458][ T9942] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1317.069878][ T9980] ptm ptm12: ldisc open failed (-12), clearing slot 12 [ 1317.840284][T10021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.033871][T10030] input: syz1 as /devices/virtual/input/input309 [ 1318.211885][T10039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.214204][T10039] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1318.308374][T10054] random: crng reseeded on system resumption [ 1319.088418][T10081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1319.194796][T10093] loop8: detected capacity change from 0 to 7 [ 1319.209847][ T1457] Dev loop8: unable to read RDB block 7 [ 1319.217577][T10095] vivid-000: ================= START STATUS ================= [ 1319.225420][ T1457] loop8: unable to read partition table [ 1319.231272][ T1457] loop8: partition table beyond EOD, truncated [ 1319.241236][T10095] vivid-000: Generate PTS: true [ 1319.247185][T10095] vivid-000: Generate SCR: true [ 1319.253111][T10093] Dev loop8: unable to read RDB block 7 [ 1319.259327][T10095] tpg source WxH: 720x576 (Y'CbCr) [ 1319.264497][T10093] loop8: unable to read partition table [ 1319.264690][T10093] loop8: partition table beyond EOD, [ 1319.270901][T10095] tpg field: 2 [ 1319.278499][T10093] truncated [ 1319.281102][T10095] tpg crop: (0,0)/720x576 [ 1319.287635][T10093] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1319.318259][T10095] tpg compose: (0,0)/720x288 [ 1319.323494][T10095] tpg colorspace: 9 [ 1319.327320][T10095] tpg transfer function: 7/2 [ 1319.349602][T10095] tpg Y'CbCr encoding: 1/1 [ 1319.380829][T10095] tpg quantization: 2/2 [ 1319.385495][T10095] tpg RGB range: 0/1 [ 1319.389760][T10095] vivid-000: ================== END STATUS ================== [ 1319.550503][T10114] binder: 10113:10114 ioctl 40489426 0 returned -22 [ 1319.876641][T10127] sp0: Synchronizing with TNC [ 1319.968545][T10139] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1319.978294][T10139] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1320.276917][T10117] [U] è [ 1320.611384][T10164] loop8: detected capacity change from 0 to 7 [ 1320.630697][T10164] Dev loop8: unable to read RDB block 7 [ 1320.639148][T10164] loop8: unable to read partition table [ 1320.645876][T10164] loop8: partition table beyond EOD, truncated [ 1320.663390][T10164] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1321.209948][T10190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.246326][ T13] Bluetooth: (null): Invalid header checksum [ 1321.262347][ T13] Bluetooth: (null): Invalid header checksum [ 1321.319383][ T13] Bluetooth: (null): Invalid header checksum [ 1321.432704][ T64] Bluetooth: (null): Invalid header checksum [ 1321.533675][ T13] Bluetooth: (null): Invalid header checksum [ 1321.646872][ T49] Bluetooth: (null): Invalid header checksum [ 1321.767440][T10225] loop8: detected capacity change from 0 to 7 [ 1321.787637][ T1457] Dev loop8: unable to read RDB block 7 [ 1321.793630][ T1457] loop8: unable to read partition table [ 1321.809643][ T1457] loop8: partition table beyond EOD, truncated [ 1321.820689][T10225] Dev loop8: unable to read RDB block 7 [ 1321.834574][T10225] loop8: unable to read partition table [ 1321.837592][T10226] can0: slcan on ptm2. [ 1321.846419][T10225] loop8: partition table beyond EOD, truncated [ 1321.893897][T10225] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1322.062664][T10212] can0 (unregistered): slcan off ptm2. [ 1322.407428][T10265] mkiss: ax0: crc mode is auto. [ 1322.465774][T10263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.382571][T10310] loop8: detected capacity change from 0 to 7 [ 1323.401202][T10310] Dev loop8: unable to read RDB block 7 [ 1323.413538][T10310] loop8: unable to read partition table [ 1323.423621][T10310] loop8: partition table beyond EOD, truncated [ 1323.429826][T10310] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1324.133236][T10349] loop8: detected capacity change from 0 to 7 [ 1324.141542][T10352] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1324.143084][ T1457] Dev loop8: unable to read RDB block 7 [ 1324.160444][ T1457] loop8: unable to read partition table [ 1324.168159][ T1457] loop8: partition table beyond EOD, truncated [ 1324.203474][T10349] Dev loop8: unable to read RDB block 7 [ 1324.209081][T10349] loop8: unable to read partition table [ 1324.234535][T10349] loop8: partition table beyond EOD, truncated [ 1324.243663][T10349] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1325.204419][T10404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.213765][T10406] loop8: detected capacity change from 0 to 7 [ 1325.233264][T10406] Dev loop8: unable to read RDB block 7 [ 1325.242784][T10406] loop8: unable to read partition table [ 1325.250087][T10406] loop8: partition table beyond EOD, truncated [ 1325.276727][T10406] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1328.574697][T10561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.046234][ T30] audit: type=1400 audit(1750370227.972:51): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="'*" pid=10588 comm="syz.7.10365" [ 1329.066436][ T30] audit: type=1400 audit(1750370227.972:52): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5DFA pid=10588 comm="syz.7.10365" [ 1329.712709][T10632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.935912][T10646] sp0: Synchronizing with TNC [ 1330.057923][T10661] blktrace: Concurrent blktraces are not allowed on sg0 [ 1331.019177][T10716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.158623][T10723] input: syz1 as /devices/virtual/input/input311 [ 1332.491753][T10923] input: syz0 as /devices/virtual/input/input313 [ 1332.872398][T10947] loop8: detected capacity change from 0 to 7 [ 1332.881906][ T1457] Dev loop8: unable to read RDB block 7 [ 1332.891036][ T1457] loop8: unable to read partition table [ 1332.897510][ T1457] loop8: partition table beyond EOD, truncated [ 1332.959579][T10947] Dev loop8: unable to read RDB block 7 [ 1332.968672][T10947] loop8: unable to read partition table [ 1332.976955][T10947] loop8: partition table beyond EOD, truncated [ 1332.993796][T10947] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1333.535165][T10969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.512153][T11088] can0: slcan on ptm1. [ 1334.765634][T11078] can0 (unregistered): slcan off ptm1. [ 1336.644230][T11250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.158366][T11279] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1337.174430][T11279] binder: 11270:11279 ioctl 40046205 0 returned -22 [ 1337.265518][T11285] syz.8.10440: attempt to access beyond end of device [ 1337.265518][T11285] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1337.919394][T11310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1339.236713][T11333] psmouse serio16: Failed to reset mouse on : -5 [ 1339.759212][T11413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.349803][T11445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.466695][T11463] syz.3.10471: attempt to access beyond end of device [ 1340.466695][T11463] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1340.659396][T11476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.897836][T11492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.928372][T11492] input: syz0 as /devices/virtual/input/input317 [ 1341.281301][T11516] QAT: Device 4 not found [ 1341.840163][T11552] loop8: detected capacity change from 0 to 7 [ 1341.851313][T11552] Dev loop8: unable to read RDB block 7 [ 1341.857188][T11552] loop8: unable to read partition table [ 1341.863136][T11552] loop8: partition table beyond EOD, truncated [ 1341.873067][T11552] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1342.328983][T11634] binder: 11633:11634 ioctl c00c620f 200000000000 returned -22 [ 1343.013457][T11333] misc userio: Buffer overflowed, userio client isn't keeping up [ 1343.924010][T11723] loop8: detected capacity change from 0 to 7 [ 1343.931290][T11723] Dev loop8: unable to read RDB block 7 [ 1343.938713][T11723] loop8: unable to read partition table [ 1343.944866][T11723] loop8: partition table beyond EOD, truncated [ 1343.951146][T11723] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1344.086224][T11333] input: PS/2 Generic Mouse as /devices/serio16/input/input314 [ 1344.335952][T11333] psmouse serio16: Failed to enable mouse on [ 1344.598596][T11772] loop8: detected capacity change from 0 to 7 [ 1344.623541][ T1457] Dev loop8: unable to read RDB block 7 [ 1344.629159][ T1457] loop8: unable to read partition table [ 1344.635108][ T1457] loop8: partition table beyond EOD, truncated [ 1344.646863][T11772] Dev loop8: unable to read RDB block 7 [ 1344.654708][T11772] loop8: unable to read partition table [ 1344.660602][T11772] loop8: partition table beyond EOD, truncated [ 1344.678689][T11772] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1345.978687][T11844] sg_write: data in/out 989/10 bytes for SCSI command 0x3a-- guessing data in; [ 1345.978687][T11844] program syz.3.10521 not setting count and/or reply_len properly [ 1346.365943][T11875] binder: binder_mmap: 11874 200000001000-20000000b000 bad vm_flags failed -1 [ 1347.460138][T11957] random: crng reseeded on system resumption [ 1347.478702][T11957] Restarting kernel threads ... [ 1347.486203][T11957] Done restarting kernel threads. [ 1347.742187][T11970] input: syz0 as /devices/virtual/input/input321 [ 1349.257619][T12037] vivid-000: ================= START STATUS ================= [ 1349.257642][T12037] vivid-000: Test Pattern: 100% Colorbar [ 1349.257689][T12037] vivid-000: Fill Percentage of Frame: 4 [ 1349.257713][T12037] vivid-000: Horizontal Movement: Move Right [ 1349.257736][T12037] vivid-000: Vertical Movement: Move Up Slow [ 1349.257758][T12037] vivid-000: OSD Text Mode: All [ 1349.257778][T12037] vivid-000: Show Border: true [ 1349.257799][T12037] vivid-000: Show Square: true [ 1349.257820][T12037] vivid-000: Sensor Flipped Horizontally: true [ 1349.257841][T12037] vivid-000: Sensor Flipped Vertically: true [ 1349.257863][T12037] vivid-000: Insert SAV Code in Image: true [ 1349.257884][T12037] vivid-000: Insert EAV Code in Image: true [ 1349.257905][T12037] vivid-000: Insert Video Guard Band: true [ 1349.257927][T12037] vivid-000: Reduced Framerate: true [ 1349.257948][T12037] vivid-000: HDMI 000-0 Is Connected To: None [ 1349.257969][T12037] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 004-0 [ 1349.257992][T12037] vivid-000: Enable Capture Cropping: false [ 1349.258013][T12037] vivid-000: Enable Capture Composing: false [ 1349.258034][T12037] vivid-000: Enable Capture Scaler: false [ 1349.258056][T12037] vivid-000: Timestamp Source: Start of Exposure [ 1349.258078][T12037] vivid-000: Colorspace: SMPTE 170M [ 1349.258099][T12037] vivid-000: Transfer Function: sRGB [ 1349.258121][T12037] vivid-000: Y'CbCr Encoding: ITU-R 601 [ 1349.258142][T12037] vivid-000: HSV Encoding: Hue 0-256 [ 1349.258163][T12037] vivid-000: Quantization: Limited Range [ 1349.258185][T12037] vivid-000: Apply Alpha To Red Only: true [ 1349.258206][T12037] vivid-000: Standard Aspect Ratio: 4x3 [ 1349.258226][T12037] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1349.258254][T12037] vivid-000: DV Timings: 4096x2160p60 inactive [ 1349.258282][T12037] vivid-000: DV Timings Aspect Ratio: 14x9 [ 1349.258304][T12037] vivid-000: Maximum EDID Blocks: 256 [ 1349.258325][T12037] vivid-000: Limited RGB Range (16-235): true [ 1349.258347][T12037] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 1349.258370][T12037] vivid-000: Power Present: 0x00000000 [ 1349.258393][T12037] tpg source WxH: 720x576 (R'G'B) [ 1349.258406][T12037] tpg field: 4 [ 1349.258415][T12037] tpg crop: (0,0)/720x576 [ 1349.258428][T12037] tpg compose: (0,0)/720x576 [ 1349.258440][T12037] tpg colorspace: 9 [ 1349.258448][T12037] tpg transfer function: 7/2 [ 1349.258458][T12037] tpg quantization: 2/2 [ 1349.258478][T12037] tpg RGB range: 0/1 [ 1349.258488][T12037] vivid-000: ================== END STATUS ================== [ 1349.575173][T12059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1350.434817][T12101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1351.663116][T12187] can0: slcan on ttynull. [ 1351.836527][T12183] can0 (unregistered): slcan off ttynull. [ 1352.476288][T12254] loop8: detected capacity change from 0 to 7 [ 1352.477496][T12254] Dev loop8: unable to read RDB block 7 [ 1352.477545][T12254] loop8: unable to read partition table [ 1352.477748][T12254] loop8: partition table beyond EOD, truncated [ 1352.477767][T12254] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1353.866861][T12355] binder: 12348:12355 ioctl c00c620f 200000000180 returned -22 [ 1354.320746][T12377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.731943][T12408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.083201][T12503] CUSE: info not properly terminated [ 1357.185102][T12525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.267425][T12528] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1357.858688][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858724][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858750][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858775][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858801][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858826][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858851][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858875][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858901][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858925][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858949][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858975][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.858999][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859023][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859048][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859074][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859098][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859123][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859149][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859174][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859198][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859224][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859250][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859274][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859299][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859324][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859348][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859373][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859398][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859423][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859447][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.859472][ T3633] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1357.863064][ T3633] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1359.180131][T12575] usb usb9: usbfs: process 12575 (syz.6.10685) did not claim interface 0 before use [ 1359.419387][T12586] mkiss: ax0: crc mode is auto. [ 1359.623820][T12601] syz.6.10690: attempt to access beyond end of device [ 1359.623820][T12601] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1359.922379][T12615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.678095][T12641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.452225][T12690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.551653][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.558490][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.277095][T12743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.110318][T12788] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1364.159245][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 1364.171936][T12824] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1365.017418][ T974] Bluetooth: hci5: Frame reassembly failed (-84) [ 1365.090399][T12852] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1366.183861][ T5845] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1366.184228][ T2458] Bluetooth: hci4: command 0x1003 tx timeout [ 1366.759886][T12934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1366.779141][T12940] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1367.064422][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 1367.071775][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1367.954469][ T30] audit: type=1400 audit(1750370266.902:53): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=12994 comm="syz.6.10765" [ 1370.355282][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355318][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355344][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355370][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355395][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355420][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355446][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355471][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355496][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355521][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355546][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355572][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355597][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355623][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355648][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355674][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355699][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355724][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355749][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355774][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355800][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355825][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355850][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355875][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355900][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355926][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355950][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.355982][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.356007][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.356030][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.356054][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.356079][T11181] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1370.382998][T11181] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1371.229181][T13124] ALSA: seq fatal error: cannot create timer (-22) [ 1372.077872][T13173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.106732][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.163407][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.181114][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.211630][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.242713][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.265436][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.282741][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.303498][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.321192][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.339015][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.356845][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.373841][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.401671][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.423610][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.431036][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.453250][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.481197][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.501428][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.537216][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.567374][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.586753][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.619448][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.630209][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.653490][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.667900][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.675687][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.683107][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.692973][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.700640][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.708400][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.717929][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.727608][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.738462][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.746224][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.756163][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.766364][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.774889][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.782966][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.796841][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.806863][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.816042][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.825753][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.833835][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.843462][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.850893][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.878618][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.913377][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.923638][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.941705][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.973436][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1372.980865][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.008620][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.023386][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.041169][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.053369][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.060817][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.116267][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.124119][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.131638][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.148780][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.156691][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.164373][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.171895][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.214529][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.224895][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.237963][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.246554][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.259800][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.268791][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.279312][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.287747][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.298564][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.308183][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.339856][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.360874][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.388421][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.406184][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.424307][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.441939][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.441967][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.441990][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442015][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442040][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442064][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442086][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442111][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442136][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442160][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442185][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442210][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442235][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442259][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442285][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442309][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442334][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442359][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442384][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442409][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442434][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442458][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442483][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442507][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442532][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442557][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442581][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442606][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442631][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442656][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442680][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442704][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442738][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442763][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442788][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442813][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442838][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442863][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442888][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442912][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442936][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442958][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.442980][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443004][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443027][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443051][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443075][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443099][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443123][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443147][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443171][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443195][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443218][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443242][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.443265][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448013][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448047][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448072][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448097][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448121][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448144][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448167][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448190][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448212][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448235][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448258][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448282][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448306][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448330][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448354][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448378][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448402][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448427][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448450][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448475][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448497][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448522][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448546][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448569][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448593][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448618][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448641][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448665][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448688][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448711][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448741][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448765][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448788][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.448813][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1373.453620][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.125506][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.132989][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133019][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133041][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133064][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133086][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133110][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133132][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133156][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133179][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133203][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133224][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133247][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133801][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133835][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133862][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133886][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133912][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133937][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133962][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.133987][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134011][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134037][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134061][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134087][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134111][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134135][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134160][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134184][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134209][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134234][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134257][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134282][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134306][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134331][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134356][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134378][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134402][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134426][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134449][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134474][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134499][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134524][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134548][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134573][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134595][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.134619][ T3620] hid-generic 0002:0003:0F35.001F: unknown main item tag 0x0 [ 1374.137120][ T3620] hid-generic 0002:0003:0F35.001F: hidraw0: HID v0.dc Device [syz0] on syz0 [ 1374.290838][T13250] fido_id[13250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.100169][T13316] syz.7.10821: attempt to access beyond end of device [ 1376.100169][T13316] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1376.317838][T13327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.433354][ T30] audit: type=1804 audit(1750370275.372:54): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10825" name="/newroot/393/cgroup.controllers" dev="tmpfs" ino=2034 res=1 errno=0 [ 1376.490842][ T30] audit: type=1800 audit(1750370275.402:55): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10825" name="cgroup.controllers" dev="tmpfs" ino=2034 res=0 errno=0 [ 1376.780261][T13357] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1376.798315][T13356] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 1377.843616][T13424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.878790][T13424] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1378.106771][ T64] Bluetooth: hci4: Frame reassembly failed (-84) [ 1378.246819][T13461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.510172][T13473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.643552][T13487] CUSE: info not properly terminated [ 1379.145079][T13518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.183564][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1380.700795][ T3620] hid-generic 0000:0000:0000.0020: item fetching failed at offset 0/1 [ 1380.727425][ T3620] hid-generic 0000:0000:0000.0020: probe with driver hid-generic failed with error -22 [ 1381.924487][T13651] input: syz0 as /devices/virtual/input/input329 [ 1381.955320][T13656] input: syz1 as /devices/virtual/input/input330 [ 1382.436811][T13695] syz.6.10889: attempt to access beyond end of device [ 1382.436811][T13695] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1384.174132][T13764] ALSA: seq fatal error: cannot create timer (-22) [ 1384.316662][T13771] loop8: detected capacity change from 0 to 7 [ 1384.339917][T13771] Dev loop8: unable to read RDB block 7 [ 1384.374133][T13771] loop8: unable to read partition table [ 1384.380020][T13771] loop8: partition table beyond EOD, truncated [ 1384.396805][T13771] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1384.896359][T13790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.405738][T13821] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 1385.589033][T13833] loop8: detected capacity change from 0 to 7 [ 1385.598562][ T1457] Dev loop8: unable to read RDB block 7 [ 1385.604555][ T1457] loop8: unable to read partition table [ 1385.610550][ T1457] loop8: partition table beyond EOD, truncated [ 1385.637954][T13833] Dev loop8: unable to read RDB block 7 [ 1385.648865][T13833] loop8: unable to read partition table [ 1385.663007][T13833] loop8: partition table beyond EOD, truncated [ 1385.672168][T13833] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 1386.197392][T13874] random: crng reseeded on system resumption [ 1389.474012][T14015] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1391.040992][T14075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.100609][T14079] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1391.832443][T14114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.890450][T14119] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1391.996945][T14129] program syz.8.10966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1391.997162][T14129] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1392.867524][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1392.876697][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1392.890950][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1392.906700][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1392.921419][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1392.948538][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1392.955994][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1392.963606][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1392.973062][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1392.993812][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1393.847572][ T6803] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.126282][ T6803] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.198048][T14151] chnl_net:caif_netlink_parms(): no params data found [ 1394.226499][T14306] mkiss: ax0: crc mode is auto. [ 1394.455985][ T6803] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.534829][T14356] vivid-002: disconnect [ 1394.594148][T14356] vivid-002: reconnect [ 1394.844838][ T6803] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.881174][T14407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1395.017985][T14304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1395.037223][T14304] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1395.063351][ C1] ------------[ cut here ]------------ [ 1395.069162][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 1395.075938][ C1] WARNING: CPU: 1 PID: 1459 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 1395.085004][ C1] Modules linked in: [ 1395.089191][ C1] CPU: 1 UID: 0 PID: 1459 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1395.100748][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1395.110813][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 1395.116123][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 a9 07 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 60 89 35 00 90 0f 0b 90 e9 dd fc ff [ 1395.135745][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 1395.141834][ C1] RAX: c700789b069f2b00 RBX: 0000000000000100 RCX: ffff888025af0000 [ 1395.149819][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1395.157805][ C1] RBP: 1ffff110067de738 R08: 0000000000000003 R09: 0000000000000004 [ 1395.165791][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a9ec R12: dffffc0000000000 [ 1395.173778][ C1] R13: ffff8880535b4948 R14: 0000000000000008 R15: ffff888033ef3978 [ 1395.181769][ C1] FS: 00007f95a7368880(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000 [ 1395.190714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1395.197307][ C1] CR2: 0000200000000100 CR3: 000000007530a000 CR4: 00000000003526f0 [ 1395.205292][ C1] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 1395.213277][ C1] DR3: 3e00000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1395.221262][ C1] Call Trace: [ 1395.224556][ C1] [ 1395.227426][ C1] call_timer_fn+0x17e/0x5f0 [ 1395.232037][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1395.237864][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1395.242574][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1395.247714][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1395.252944][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1395.258776][ C1] __run_timer_base+0x646/0x860 [ 1395.263659][ C1] ? ktime_get+0x3e/0x1f0 [ 1395.268025][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1395.273420][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1395.279698][ C1] run_timer_softirq+0xb7/0x180 [ 1395.284578][ C1] handle_softirqs+0x286/0x870 [ 1395.289366][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1395.294156][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1395.299464][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1395.304690][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1395.309299][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1395.314527][ C1] irq_exit_rcu+0x9/0x30 [ 1395.318787][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1395.324448][ C1] [ 1395.327392][ C1] [ 1395.330339][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1395.336342][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1395.341730][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ec b6 7c 00 48 c7 c3 58 6f c1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 89 dc 18 11 74 11 83 e0 04 c1 e8 02 5b [ 1395.361345][ C1] RSP: 0018:ffffc9000454f9a0 EFLAGS: 00000a06 [ 1395.367407][ C1] RAX: 0000000000000000 RBX: ffff8880b8732f58 RCX: c700789b069f2b00 [ 1395.375368][ C1] RDX: 0000000000000000 RSI: ffffffff8be41860 RDI: ffffffff8be41820 [ 1395.383332][ C1] RBP: ffffffff84802a1f R08: 0000000000000000 R09: 0000000000000000 [ 1395.391289][ C1] R10: dffffc0000000000 R11: ffffed1003df84b1 R12: 0000000000000002 [ 1395.399246][ C1] R13: ffffffff8e33eda0 R14: ffffffff8dc73c68 R15: dffffc0000000000 [ 1395.407208][ C1] ? aa_file_perm+0x11f/0xed0 [ 1395.411888][ C1] lock_acquire+0x5f/0x360 [ 1395.416299][ C1] ? __sock_sendmsg+0x109/0x270 [ 1395.421143][ C1] ? aa_file_perm+0x11f/0xed0 [ 1395.425814][ C1] aa_file_perm+0x13c/0xed0 [ 1395.430303][ C1] ? aa_file_perm+0x11f/0xed0 [ 1395.434967][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1395.440248][ C1] ? rcu_is_watching+0x15/0xb0 [ 1395.445001][ C1] ? kfree+0x4d/0x440 [ 1395.448970][ C1] ? import_iovec+0x74/0xa0 [ 1395.453466][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 1395.458480][ C1] ? ___sys_sendmsg+0x22f/0x2a0 [ 1395.463331][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1395.468535][ C1] common_file_perm+0x18f/0x200 [ 1395.473380][ C1] security_file_permission+0x91/0x290 [ 1395.478835][ C1] rw_verify_area+0xba/0x650 [ 1395.483422][ C1] vfs_write+0x15a/0xa90 [ 1395.487658][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1395.492418][ C1] ? __x64_sys_sendmsg+0x1b4/0x260 [ 1395.497520][ C1] ? kmem_cache_free+0x309/0x400 [ 1395.502453][ C1] ksys_write+0x145/0x250 [ 1395.506776][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1395.511618][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1395.516287][ C1] do_syscall_64+0xfa/0x3b0 [ 1395.520777][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1395.525968][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.532020][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1395.536692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.542568][ C1] RIP: 0033:0x7f95a6ca7407 [ 1395.546973][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1395.566569][ C1] RSP: 002b:00007ffe7fe922f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1395.574974][ C1] RAX: ffffffffffffffda RBX: 00007f95a7368880 RCX: 00007f95a6ca7407 [ 1395.582934][ C1] RDX: 0000000000000000 RSI: 00007ffe7fe92397 RDI: 000000000000000a [ 1395.590897][ C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 1395.598855][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f95a73686e8 [ 1395.606818][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1395.614789][ C1] [ 1395.617805][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1395.625071][ C1] CPU: 1 UID: 0 PID: 1459 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00158-g5c8013ae2e86 #0 PREEMPT(full) [ 1395.636594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1395.646633][ C1] Call Trace: [ 1395.649904][ C1] [ 1395.652734][ C1] dump_stack_lvl+0x99/0x250 [ 1395.657319][ C1] ? __asan_memcpy+0x40/0x70 [ 1395.661900][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.667087][ C1] ? __pfx__printk+0x10/0x10 [ 1395.671677][ C1] panic+0x2db/0x790 [ 1395.675562][ C1] ? __pfx_panic+0x10/0x10 [ 1395.679965][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 1395.685171][ C1] __warn+0x31b/0x4b0 [ 1395.689135][ C1] ? __queue_work+0xd62/0xfe0 [ 1395.693802][ C1] ? __queue_work+0xd62/0xfe0 [ 1395.698468][ C1] report_bug+0x2be/0x4f0 [ 1395.702788][ C1] ? __queue_work+0xd62/0xfe0 [ 1395.707455][ C1] ? __queue_work+0xd62/0xfe0 [ 1395.712119][ C1] ? __queue_work+0xd64/0xfe0 [ 1395.716786][ C1] handle_bug+0x84/0x160 [ 1395.721019][ C1] exc_invalid_op+0x1a/0x50 [ 1395.725510][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1395.730344][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 1395.735619][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 a9 07 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e0 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 60 89 35 00 90 0f 0b 90 e9 dd fc ff [ 1395.755209][ C1] RSP: 0018:ffffc90000a08b08 EFLAGS: 00010046 [ 1395.761262][ C1] RAX: c700789b069f2b00 RBX: 0000000000000100 RCX: ffff888025af0000 [ 1395.769219][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1395.777174][ C1] RBP: 1ffff110067de738 R08: 0000000000000003 R09: 0000000000000004 [ 1395.785131][ C1] R10: dffffc0000000000 R11: fffffbfff1c3a9ec R12: dffffc0000000000 [ 1395.793098][ C1] R13: ffff8880535b4948 R14: 0000000000000008 R15: ffff888033ef3978 [ 1395.801068][ C1] ? __queue_work+0xd61/0xfe0 [ 1395.805742][ C1] call_timer_fn+0x17e/0x5f0 [ 1395.810317][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1395.816112][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1395.820776][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1395.825884][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1395.831072][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1395.836876][ C1] __run_timer_base+0x646/0x860 [ 1395.841721][ C1] ? ktime_get+0x3e/0x1f0 [ 1395.846049][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1395.851411][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1395.857651][ C1] run_timer_softirq+0xb7/0x180 [ 1395.862496][ C1] handle_softirqs+0x286/0x870 [ 1395.867254][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1395.872011][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1395.877287][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1395.882480][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1395.887059][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1395.892248][ C1] irq_exit_rcu+0x9/0x30 [ 1395.896474][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1395.902102][ C1] [ 1395.905020][ C1] [ 1395.907937][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1395.913908][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1395.919269][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ec b6 7c 00 48 c7 c3 58 6f c1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 89 dc 18 11 74 11 83 e0 04 c1 e8 02 5b [ 1395.938861][ C1] RSP: 0018:ffffc9000454f9a0 EFLAGS: 00000a06 [ 1395.944924][ C1] RAX: 0000000000000000 RBX: ffff8880b8732f58 RCX: c700789b069f2b00 [ 1395.952884][ C1] RDX: 0000000000000000 RSI: ffffffff8be41860 RDI: ffffffff8be41820 [ 1395.960857][ C1] RBP: ffffffff84802a1f R08: 0000000000000000 R09: 0000000000000000 [ 1395.968825][ C1] R10: dffffc0000000000 R11: ffffed1003df84b1 R12: 0000000000000002 [ 1395.976789][ C1] R13: ffffffff8e33eda0 R14: ffffffff8dc73c68 R15: dffffc0000000000 [ 1395.984754][ C1] ? aa_file_perm+0x11f/0xed0 [ 1395.989435][ C1] lock_acquire+0x5f/0x360 [ 1395.993843][ C1] ? __sock_sendmsg+0x109/0x270 [ 1395.998689][ C1] ? aa_file_perm+0x11f/0xed0 [ 1396.003354][ C1] aa_file_perm+0x13c/0xed0 [ 1396.007845][ C1] ? aa_file_perm+0x11f/0xed0 [ 1396.012513][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1396.017794][ C1] ? rcu_is_watching+0x15/0xb0 [ 1396.022549][ C1] ? kfree+0x4d/0x440 [ 1396.026521][ C1] ? import_iovec+0x74/0xa0 [ 1396.031013][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 1396.036028][ C1] ? ___sys_sendmsg+0x22f/0x2a0 [ 1396.040870][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1396.046063][ C1] common_file_perm+0x18f/0x200 [ 1396.050908][ C1] security_file_permission+0x91/0x290 [ 1396.056369][ C1] rw_verify_area+0xba/0x650 [ 1396.060961][ C1] vfs_write+0x15a/0xa90 [ 1396.065204][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1396.069966][ C1] ? __x64_sys_sendmsg+0x1b4/0x260 [ 1396.075068][ C1] ? kmem_cache_free+0x309/0x400 [ 1396.080000][ C1] ksys_write+0x145/0x250 [ 1396.084322][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1396.089165][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1396.093836][ C1] do_syscall_64+0xfa/0x3b0 [ 1396.098326][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1396.103516][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.109569][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1396.114235][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.120118][ C1] RIP: 0033:0x7f95a6ca7407 [ 1396.124520][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1396.144115][ C1] RSP: 002b:00007ffe7fe922f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1396.152522][ C1] RAX: ffffffffffffffda RBX: 00007f95a7368880 RCX: 00007f95a6ca7407 [ 1396.160484][ C1] RDX: 0000000000000000 RSI: 00007ffe7fe92397 RDI: 000000000000000a [ 1396.168440][ C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 1396.176397][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f95a73686e8 [ 1396.184352][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.192319][ C1] [ 1396.195552][ C1] Kernel Offset: disabled [ 1396.199867][ C1] Rebooting in 86400 seconds..