Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:51607' (ECDSA) to the list of known hosts. 2022/10/01 02:42:20 fuzzer started 2022/10/01 02:42:20 dialing manager at localhost:35095 syzkaller login: [ 35.645188] cgroup: Unknown subsys name 'net' [ 35.708091] cgroup: Unknown subsys name 'rlimit' 2022/10/01 02:42:35 syscalls: 2215 2022/10/01 02:42:35 code coverage: enabled 2022/10/01 02:42:35 comparison tracing: enabled 2022/10/01 02:42:35 extra coverage: enabled 2022/10/01 02:42:35 setuid sandbox: enabled 2022/10/01 02:42:35 namespace sandbox: enabled 2022/10/01 02:42:35 Android sandbox: enabled 2022/10/01 02:42:35 fault injection: enabled 2022/10/01 02:42:35 leak checking: enabled 2022/10/01 02:42:35 net packet injection: enabled 2022/10/01 02:42:35 net device setup: enabled 2022/10/01 02:42:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 02:42:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 02:42:35 USB emulation: enabled 2022/10/01 02:42:35 hci packet injection: enabled 2022/10/01 02:42:35 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 02:42:35 802.15.4 emulation: enabled 2022/10/01 02:42:35 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/01 02:42:35 fetching corpus: 50, signal 21316/24638 (executing program) 2022/10/01 02:42:36 fetching corpus: 100, signal 37104/41291 (executing program) 2022/10/01 02:42:36 fetching corpus: 149, signal 43183/48364 (executing program) 2022/10/01 02:42:36 fetching corpus: 199, signal 48031/54151 (executing program) 2022/10/01 02:42:36 fetching corpus: 249, signal 57317/63739 (executing program) 2022/10/01 02:42:36 fetching corpus: 299, signal 63274/70023 (executing program) 2022/10/01 02:42:36 fetching corpus: 349, signal 66649/73981 (executing program) 2022/10/01 02:42:36 fetching corpus: 399, signal 69862/77613 (executing program) 2022/10/01 02:42:36 fetching corpus: 449, signal 73052/81152 (executing program) 2022/10/01 02:42:37 fetching corpus: 499, signal 76512/84820 (executing program) 2022/10/01 02:42:37 fetching corpus: 549, signal 79152/87750 (executing program) 2022/10/01 02:42:37 fetching corpus: 599, signal 82258/90935 (executing program) 2022/10/01 02:42:37 fetching corpus: 649, signal 84667/93417 (executing program) 2022/10/01 02:42:37 fetching corpus: 699, signal 87315/96017 (executing program) 2022/10/01 02:42:37 fetching corpus: 749, signal 89794/98443 (executing program) 2022/10/01 02:42:37 fetching corpus: 799, signal 92591/101076 (executing program) 2022/10/01 02:42:37 fetching corpus: 849, signal 94123/102630 (executing program) 2022/10/01 02:42:37 fetching corpus: 899, signal 97977/105648 (executing program) 2022/10/01 02:42:38 fetching corpus: 949, signal 99163/106866 (executing program) 2022/10/01 02:42:38 fetching corpus: 999, signal 101261/108749 (executing program) 2022/10/01 02:42:38 fetching corpus: 1049, signal 103670/110655 (executing program) 2022/10/01 02:42:38 fetching corpus: 1099, signal 105523/112111 (executing program) 2022/10/01 02:42:38 fetching corpus: 1149, signal 106740/113151 (executing program) 2022/10/01 02:42:38 fetching corpus: 1199, signal 108406/114422 (executing program) 2022/10/01 02:42:38 fetching corpus: 1249, signal 109237/115168 (executing program) 2022/10/01 02:42:38 fetching corpus: 1299, signal 110831/116285 (executing program) 2022/10/01 02:42:39 fetching corpus: 1349, signal 112671/117453 (executing program) 2022/10/01 02:42:39 fetching corpus: 1399, signal 114411/118510 (executing program) 2022/10/01 02:42:39 fetching corpus: 1449, signal 115203/119079 (executing program) 2022/10/01 02:42:39 fetching corpus: 1499, signal 117552/120412 (executing program) 2022/10/01 02:42:39 fetching corpus: 1549, signal 119051/121185 (executing program) 2022/10/01 02:42:39 fetching corpus: 1599, signal 120317/121859 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/121928 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/121955 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122009 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122061 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122116 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122155 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122207 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122260 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122309 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122355 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122407 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122449 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122488 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122534 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122584 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122623 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122662 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122710 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122753 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122783 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122825 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122862 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122917 (executing program) 2022/10/01 02:42:39 fetching corpus: 1606, signal 120376/122967 (executing program) 2022/10/01 02:42:40 fetching corpus: 1606, signal 120376/123006 (executing program) 2022/10/01 02:42:40 fetching corpus: 1606, signal 120376/123051 (executing program) 2022/10/01 02:42:40 fetching corpus: 1606, signal 120376/123097 (executing program) 2022/10/01 02:42:40 fetching corpus: 1606, signal 120376/123097 (executing program) 2022/10/01 02:42:42 starting 8 fuzzer processes 02:42:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029e21b3bf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010000ee870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020000ee870325132510000e870325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) 02:42:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 02:42:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:42:42 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 02:42:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f80100200040000000000000000000800029600c6cf153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000a5e970325132510000e97032510300000000002e2e2020202020202020201000a5e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a5e970325132510000e970325104001a040000", 0x80, 0x1e00}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x2e00}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7e00}], 0x0, &(0x7f0000010d00)) [ 56.933301] audit: type=1400 audit(1664592162.245:6): avc: denied { execmem } for pid=284 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:42:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x9e1eb51aa9dc7310, 0x0, 0x0) 02:42:42 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast}}, 0xe8) 02:42:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}}}, 0x6) [ 58.233124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.235668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.237281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.240769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.242729] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.244268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.255511] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.288421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.292764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.296080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.304642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.306928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.308868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.319512] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.350237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.355098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.356951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.357113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.358448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.361978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.363240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.364319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.366172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.367429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.367659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.368661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.372280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.374114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.375092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.376000] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.377238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.379568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.381349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.381715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.382628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.384013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.386894] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.387024] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.389886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.391264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.393499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.395060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.397580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.398877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.404252] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.406055] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.406070] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.407446] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.409944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.449624] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.483923] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.485994] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.501848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.507596] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.509204] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.521519] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.316932] Bluetooth: hci0: command 0x0409 tx timeout [ 60.380512] Bluetooth: hci2: command 0x0409 tx timeout [ 60.444485] Bluetooth: hci5: command 0x0409 tx timeout [ 60.445229] Bluetooth: hci3: command 0x0409 tx timeout [ 60.446150] Bluetooth: hci4: command 0x0409 tx timeout [ 60.446767] Bluetooth: hci6: command 0x0409 tx timeout [ 60.508458] Bluetooth: hci1: command 0x0409 tx timeout [ 60.573441] Bluetooth: hci7: command 0x0409 tx timeout [ 62.365450] Bluetooth: hci0: command 0x041b tx timeout [ 62.429540] Bluetooth: hci2: command 0x041b tx timeout [ 62.493549] Bluetooth: hci6: command 0x041b tx timeout [ 62.494040] Bluetooth: hci4: command 0x041b tx timeout [ 62.494466] Bluetooth: hci3: command 0x041b tx timeout [ 62.494856] Bluetooth: hci5: command 0x041b tx timeout [ 62.557488] Bluetooth: hci1: command 0x041b tx timeout [ 62.620433] Bluetooth: hci7: command 0x041b tx timeout [ 64.412532] Bluetooth: hci0: command 0x040f tx timeout [ 64.476565] Bluetooth: hci2: command 0x040f tx timeout [ 64.540502] Bluetooth: hci5: command 0x040f tx timeout [ 64.541296] Bluetooth: hci3: command 0x040f tx timeout [ 64.542087] Bluetooth: hci4: command 0x040f tx timeout [ 64.542979] Bluetooth: hci6: command 0x040f tx timeout [ 64.604464] Bluetooth: hci1: command 0x040f tx timeout [ 64.668458] Bluetooth: hci7: command 0x040f tx timeout [ 66.460470] Bluetooth: hci0: command 0x0419 tx timeout [ 66.524536] Bluetooth: hci2: command 0x0419 tx timeout [ 66.588510] Bluetooth: hci6: command 0x0419 tx timeout [ 66.589305] Bluetooth: hci4: command 0x0419 tx timeout [ 66.590100] Bluetooth: hci3: command 0x0419 tx timeout [ 66.590962] Bluetooth: hci5: command 0x0419 tx timeout [ 66.652451] Bluetooth: hci1: command 0x0419 tx timeout [ 66.716469] Bluetooth: hci7: command 0x0419 tx timeout [ 114.848803] audit: type=1400 audit(1664592220.160:7): avc: denied { open } for pid=3870 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.850346] audit: type=1400 audit(1664592220.161:8): avc: denied { kernel } for pid=3870 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 114.873209] ------------[ cut here ]------------ [ 114.873230] [ 114.873233] ====================================================== [ 114.873237] WARNING: possible circular locking dependency detected [ 114.873241] 6.0.0-rc7-next-20220930 #1 Not tainted [ 114.873247] ------------------------------------------------------ [ 114.873251] syz-executor.2/3871 is trying to acquire lock: [ 114.873257] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 114.873297] [ 114.873297] but task is already holding lock: [ 114.873300] ffff888010497020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 114.873327] [ 114.873327] which lock already depends on the new lock. [ 114.873327] [ 114.873330] [ 114.873330] the existing dependency chain (in reverse order) is: [ 114.873334] [ 114.873334] -> #3 (&ctx->lock){....}-{2:2}: [ 114.873348] _raw_spin_lock+0x2a/0x40 [ 114.873359] __perf_event_task_sched_out+0x53b/0x18d0 [ 114.873373] __schedule+0xedd/0x2470 [ 114.873387] schedule+0xda/0x1b0 [ 114.873400] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.873413] syscall_exit_to_user_mode+0x19/0x40 [ 114.873426] do_syscall_64+0x48/0x90 [ 114.873443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.873456] [ 114.873456] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 114.873470] _raw_spin_lock_nested+0x30/0x40 [ 114.873480] raw_spin_rq_lock_nested+0x1e/0x30 [ 114.873493] task_fork_fair+0x63/0x4d0 [ 114.873510] sched_cgroup_fork+0x3d0/0x540 [ 114.873524] copy_process+0x4183/0x6e20 [ 114.873536] kernel_clone+0xe7/0x890 [ 114.873549] user_mode_thread+0xad/0xf0 [ 114.873562] rest_init+0x24/0x250 [ 114.873578] arch_call_rest_init+0xf/0x14 [ 114.873600] start_kernel+0x4c6/0x4eb [ 114.873615] secondary_startup_64_no_verify+0xe0/0xeb [ 114.873629] [ 114.873629] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 114.873643] _raw_spin_lock_irqsave+0x39/0x60 [ 114.873654] try_to_wake_up+0xab/0x1930 [ 114.873667] up+0x75/0xb0 [ 114.873681] __up_console_sem+0x6e/0x80 [ 114.873697] console_unlock+0x46a/0x590 [ 114.873713] do_con_write+0xc05/0x1d50 [ 114.873724] con_write+0x21/0x40 [ 114.873732] n_tty_write+0x4d4/0xfe0 [ 114.873745] file_tty_write.constprop.0+0x455/0x8a0 [ 114.873756] vfs_write+0x9c3/0xd90 [ 114.873773] ksys_write+0x127/0x250 [ 114.873788] do_syscall_64+0x3b/0x90 [ 114.873805] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.873817] [ 114.873817] -> #0 ((console_sem).lock){....}-{2:2}: [ 114.873830] __lock_acquire+0x2a02/0x5e70 [ 114.873848] lock_acquire+0x1a2/0x530 [ 114.873863] _raw_spin_lock_irqsave+0x39/0x60 [ 114.873874] down_trylock+0xe/0x70 [ 114.873888] __down_trylock_console_sem+0x3b/0xd0 [ 114.873904] vprintk_emit+0x16b/0x560 [ 114.873920] vprintk+0x84/0xa0 [ 114.873936] _printk+0xba/0xf1 [ 114.873947] report_bug.cold+0x72/0xab [ 114.873963] handle_bug+0x3c/0x70 [ 114.873979] exc_invalid_op+0x14/0x50 [ 114.873996] asm_exc_invalid_op+0x16/0x20 [ 114.874008] group_sched_out.part.0+0x2c7/0x460 [ 114.874026] ctx_sched_out+0x8f1/0xc10 [ 114.874043] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.874053] __schedule+0xedd/0x2470 [ 114.874067] schedule+0xda/0x1b0 [ 114.874080] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.874090] syscall_exit_to_user_mode+0x19/0x40 [ 114.874102] do_syscall_64+0x48/0x90 [ 114.874119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.874131] [ 114.874131] other info that might help us debug this: [ 114.874131] [ 114.874134] Chain exists of: [ 114.874134] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 114.874134] [ 114.874149] Possible unsafe locking scenario: [ 114.874149] [ 114.874151] CPU0 CPU1 [ 114.874153] ---- ---- [ 114.874156] lock(&ctx->lock); [ 114.874161] lock(&rq->__lock); [ 114.874168] lock(&ctx->lock); [ 114.874174] lock((console_sem).lock); [ 114.874180] [ 114.874180] *** DEADLOCK *** [ 114.874180] [ 114.874182] 2 locks held by syz-executor.2/3871: [ 114.874188] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 114.874218] #1: ffff888010497020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 114.874243] [ 114.874243] stack backtrace: [ 114.874246] CPU: 1 PID: 3871 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 114.874259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 114.874267] Call Trace: [ 114.874271] [ 114.874274] dump_stack_lvl+0x8b/0xb3 [ 114.874293] check_noncircular+0x263/0x2e0 [ 114.874309] ? format_decode+0x26c/0xb50 [ 114.874325] ? print_circular_bug+0x450/0x450 [ 114.874342] ? simple_strtoul+0x30/0x30 [ 114.874358] ? format_decode+0x26c/0xb50 [ 114.874375] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 114.874392] __lock_acquire+0x2a02/0x5e70 [ 114.874413] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 114.874435] lock_acquire+0x1a2/0x530 [ 114.874452] ? down_trylock+0xe/0x70 [ 114.874468] ? lock_release+0x750/0x750 [ 114.874489] ? vprintk+0x84/0xa0 [ 114.874509] _raw_spin_lock_irqsave+0x39/0x60 [ 114.874524] ? down_trylock+0xe/0x70 [ 114.874541] down_trylock+0xe/0x70 [ 114.874557] ? vprintk+0x84/0xa0 [ 114.874573] __down_trylock_console_sem+0x3b/0xd0 [ 114.874590] vprintk_emit+0x16b/0x560 [ 114.874609] vprintk+0x84/0xa0 [ 114.874626] _printk+0xba/0xf1 [ 114.874637] ? record_print_text.cold+0x16/0x16 [ 114.874653] ? report_bug.cold+0x66/0xab [ 114.874671] ? group_sched_out.part.0+0x2c7/0x460 [ 114.874689] report_bug.cold+0x72/0xab [ 114.874707] handle_bug+0x3c/0x70 [ 114.874724] exc_invalid_op+0x14/0x50 [ 114.874742] asm_exc_invalid_op+0x16/0x20 [ 114.874755] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 114.874775] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 114.874786] RSP: 0018:ffff88803e107c48 EFLAGS: 00010006 [ 114.874796] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 114.874803] RDX: ffff88801b35d040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 114.874811] RBP: ffff88801ba40000 R08: 0000000000000005 R09: 0000000000000001 [ 114.874819] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff888010497000 [ 114.874826] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 114.874837] ? group_sched_out.part.0+0x2c7/0x460 [ 114.874857] ? group_sched_out.part.0+0x2c7/0x460 [ 114.874876] ctx_sched_out+0x8f1/0xc10 [ 114.874896] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.874910] ? lock_is_held_type+0xd7/0x130 [ 114.874923] ? __perf_cgroup_move+0x160/0x160 [ 114.874934] ? set_next_entity+0x304/0x550 [ 114.874951] ? update_curr+0x267/0x740 [ 114.874969] ? lock_is_held_type+0xd7/0x130 [ 114.874983] __schedule+0xedd/0x2470 [ 114.875000] ? io_schedule_timeout+0x150/0x150 [ 114.875016] ? rcu_read_lock_sched_held+0x3e/0x80 [ 114.875037] schedule+0xda/0x1b0 [ 114.875052] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.875064] syscall_exit_to_user_mode+0x19/0x40 [ 114.875078] do_syscall_64+0x48/0x90 [ 114.875095] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.875108] RIP: 0033:0x7f64e4038b19 [ 114.875117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.875127] RSP: 002b:00007f64e15ae218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.875138] RAX: 0000000000000001 RBX: 00007f64e414bf68 RCX: 00007f64e4038b19 [ 114.875145] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64e414bf6c [ 114.875153] RBP: 00007f64e414bf60 R08: 000000000000000e R09: 0000000000000000 [ 114.875160] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f64e414bf6c [ 114.875167] R13: 00007fff816f9eef R14: 00007f64e15ae300 R15: 0000000000022000 [ 114.875179] [ 114.931912] WARNING: CPU: 1 PID: 3871 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 114.932578] Modules linked in: [ 114.932812] CPU: 1 PID: 3871 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 114.933378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 114.934157] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 114.934547] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 114.935845] RSP: 0018:ffff88803e107c48 EFLAGS: 00010006 [ 114.936253] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 114.936816] RDX: ffff88801b35d040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 114.937371] RBP: ffff88801ba40000 R08: 0000000000000005 R09: 0000000000000001 [ 114.937912] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff888010497000 [ 114.938443] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 114.938960] FS: 00007f64e15ae700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 114.939579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.940035] CR2: 00007fca57fa7008 CR3: 0000000015d80000 CR4: 0000000000350ee0 [ 114.940579] Call Trace: [ 114.940784] [ 114.940963] ctx_sched_out+0x8f1/0xc10 [ 114.941265] __perf_event_task_sched_out+0x6d0/0x18d0 [ 114.941656] ? lock_is_held_type+0xd7/0x130 [ 114.942009] ? __perf_cgroup_move+0x160/0x160 [ 114.942365] ? set_next_entity+0x304/0x550 [ 114.942676] ? update_curr+0x267/0x740 [ 114.942961] ? lock_is_held_type+0xd7/0x130 [ 114.943279] __schedule+0xedd/0x2470 [ 114.943558] ? io_schedule_timeout+0x150/0x150 [ 114.943924] ? rcu_read_lock_sched_held+0x3e/0x80 [ 114.944298] schedule+0xda/0x1b0 [ 114.944565] exit_to_user_mode_prepare+0x114/0x1a0 [ 114.944938] syscall_exit_to_user_mode+0x19/0x40 [ 114.945316] do_syscall_64+0x48/0x90 [ 114.945608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 114.946013] RIP: 0033:0x7f64e4038b19 [ 114.946293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.947647] RSP: 002b:00007f64e15ae218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.948221] RAX: 0000000000000001 RBX: 00007f64e414bf68 RCX: 00007f64e4038b19 [ 114.948777] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f64e414bf6c [ 114.949310] RBP: 00007f64e414bf60 R08: 000000000000000e R09: 0000000000000000 [ 114.949850] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f64e414bf6c [ 114.950383] R13: 00007fff816f9eef R14: 00007f64e15ae300 R15: 0000000000022000 [ 114.950926] [ 114.951110] irq event stamp: 694 [ 114.951366] hardirqs last enabled at (693): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 114.952065] hardirqs last disabled at (694): [] __schedule+0x1225/0x2470 [ 114.952671] softirqs last enabled at (174): [] __irq_exit_rcu+0x11b/0x180 [ 114.953286] softirqs last disabled at (143): [] __irq_exit_rcu+0x11b/0x180 [ 114.953911] ---[ end trace 0000000000000000 ]--- [ 115.294309] loop4: detected capacity change from 0 to 128 02:43:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x9e1eb51aa9dc7310, 0x0, 0x0) [ 115.347366] Bluetooth: MGMT ver 1.22 02:43:40 executing program 4: semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x7f}, {}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) 02:43:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x9e1eb51aa9dc7310, 0x0, 0x0) 02:43:40 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast}}, 0xe8) 02:43:40 executing program 4: semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x7f}, {}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) 02:43:40 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) [ 115.557384] hrtimer: interrupt took 13376 ns 02:43:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x9e1eb51aa9dc7310, 0x0, 0x0) [ 115.772884] loop0: detected capacity change from 0 to 1300 02:43:41 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast}}, 0xe8) 02:43:41 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 02:43:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 02:43:41 executing program 4: semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x7f}, {}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) 02:43:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}}}, 0x6) 02:43:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029e21b3bf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010000ee870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020000ee870325132510000e870325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) 02:43:41 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 02:43:41 executing program 4: semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x7f}, {}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) [ 116.391831] loop0: detected capacity change from 0 to 1300 [ 116.498384] loop0: detected capacity change from 0 to 1300 02:43:41 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local}, 0xa, @in=@broadcast}}, 0xe8) 02:43:41 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)={0x88540}, 0x78) 02:43:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}}}, 0x6) 02:43:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029e21b3bf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010000ee870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020000ee870325132510000e870325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) 02:43:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 02:43:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029e21b3bf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010000ee870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020000ee870325132510000e870325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00)) [ 116.604038] loop0: detected capacity change from 0 to 1300 02:43:41 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:41 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 02:43:42 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}}}, 0x6) 02:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 02:43:42 executing program 1: r0 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0) 02:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 1: r0 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0) 02:43:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 02:43:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 1: r0 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0) 02:43:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 02:43:42 executing program 7: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @empty, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x8}, @rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x27, 0x0, [@dev, @local, @private, @loopback, @empty, @remote, @empty, @loopback, @local]}]}}}}}}}, 0x0) 02:43:42 executing program 1: r0 = syz_io_uring_setup(0xb9b, &(0x7f0000000440), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x3, &(0x7f0000000580)={0x0, 0x3f00, 0x0}, 0x0) 02:43:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5850c560bf20b590}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x6) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f00000005c0)) clone3(&(0x7f0000001340)={0x80c200, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x1f}, &(0x7f0000000200)=""/73, 0x49, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[0x0, r5], 0x2, {r3}}, 0x58) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)=""/137, &(0x7f0000001500)=0x89) r6 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0x6f}}, './file0\x00'}) pidfd_send_signal(r7, 0x13, &(0x7f0000001540)={0x3e, 0x453, 0x5}, 0x0) 02:43:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 02:43:42 executing program 7: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @empty, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x8}, @rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x27, 0x0, [@dev, @local, @private, @loopback, @empty, @remote, @empty, @loopback, @local]}]}}}}}}}, 0x0) [ 117.589755] loop6: detected capacity change from 0 to 136 02:43:42 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f80100200040000300000000000000800029b11ba1f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100040eb70325132510000eb7032510300000000002e2e202020202020202020100040eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200040eb70325132510000eb70325104001a040000", 0x80, 0x2800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8800}], 0x0, &(0x7f0000010f00)) 02:43:42 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) 02:43:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe1, 0x1, "66e5b91c18e3f109af5c0306a8556153ccd2cbba6ebdc9ce766f3ac5dda99cc2a6093cbaec6a2d2b7d276651846c961e9addbf6924d382eda687d6c51a17228b3f74407515e8700c62d2c1d720c1dc2e976b5feebabc07f7bd0205c93198506ac9dae7028d77d94e686188bfe1481ec2c7fca015870faa9fd6d2d8e130828a01f9866407e49cf948e0b8105195df71e44fe29e6d28d6eeb651637920eea7e9b5f9b8558af6f040db243c549ae946938263a60c9859b723df320ad043d78c85176cbf98ff7473e11d71b691074a22266ddf4223c52cf7498c51020de6b5"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdbc, 0x3, 0x0, 0x1, [{0xdb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdb1, 0x1, "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"}}]}]}, 0xec4}}, 0x0) 02:43:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) 02:43:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 02:43:42 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x0, 0x0) [ 117.616626] random: crng reseeded on system resumption 02:43:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe1, 0x1, "66e5b91c18e3f109af5c0306a8556153ccd2cbba6ebdc9ce766f3ac5dda99cc2a6093cbaec6a2d2b7d276651846c961e9addbf6924d382eda687d6c51a17228b3f74407515e8700c62d2c1d720c1dc2e976b5feebabc07f7bd0205c93198506ac9dae7028d77d94e686188bfe1481ec2c7fca015870faa9fd6d2d8e130828a01f9866407e49cf948e0b8105195df71e44fe29e6d28d6eeb651637920eea7e9b5f9b8558af6f040db243c549ae946938263a60c9859b723df320ad043d78c85176cbf98ff7473e11d71b691074a22266ddf4223c52cf7498c51020de6b5"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdbc, 0x3, 0x0, 0x1, [{0xdb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdb1, 0x1, "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"}}]}]}, 0xec4}}, 0x0) 02:43:42 executing program 7: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @empty, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x8}, @rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x27, 0x0, [@dev, @local, @private, @loopback, @empty, @remote, @empty, @loopback, @local]}]}}}}}}}, 0x0) 02:43:42 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9827c) 02:43:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 02:43:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) [ 117.663859] Restarting kernel threads ... done. 02:43:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) [ 117.699777] random: crng reseeded on system resumption 02:43:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) [ 117.713010] Restarting kernel threads ... done. [ 117.724446] Bluetooth: hci0: command 0x2016 tx timeout 02:43:43 executing program 7: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x4, 0x0, 0x0, @empty, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x8}, @rr={0x7, 0x13, 0x0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @multicast2]}, @rr={0x7, 0x27, 0x0, [@dev, @local, @private, @loopback, @empty, @remote, @empty, @loopback, @local]}]}}}}}}}, 0x0) 02:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe1, 0x1, "66e5b91c18e3f109af5c0306a8556153ccd2cbba6ebdc9ce766f3ac5dda99cc2a6093cbaec6a2d2b7d276651846c961e9addbf6924d382eda687d6c51a17228b3f74407515e8700c62d2c1d720c1dc2e976b5feebabc07f7bd0205c93198506ac9dae7028d77d94e686188bfe1481ec2c7fca015870faa9fd6d2d8e130828a01f9866407e49cf948e0b8105195df71e44fe29e6d28d6eeb651637920eea7e9b5f9b8558af6f040db243c549ae946938263a60c9859b723df320ad043d78c85176cbf98ff7473e11d71b691074a22266ddf4223c52cf7498c51020de6b5"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdbc, 0x3, 0x0, 0x1, [{0xdb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdb1, 0x1, "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"}}]}]}, 0xec4}}, 0x0) 02:43:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 02:43:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) 02:43:43 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9827c) [ 117.784980] random: crng reseeded on system resumption [ 117.819506] Restarting kernel threads ... done. 02:43:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) 02:43:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) 02:43:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) 02:43:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 02:43:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe1, 0x1, "66e5b91c18e3f109af5c0306a8556153ccd2cbba6ebdc9ce766f3ac5dda99cc2a6093cbaec6a2d2b7d276651846c961e9addbf6924d382eda687d6c51a17228b3f74407515e8700c62d2c1d720c1dc2e976b5feebabc07f7bd0205c93198506ac9dae7028d77d94e686188bfe1481ec2c7fca015870faa9fd6d2d8e130828a01f9866407e49cf948e0b8105195df71e44fe29e6d28d6eeb651637920eea7e9b5f9b8558af6f040db243c549ae946938263a60c9859b723df320ad043d78c85176cbf98ff7473e11d71b691074a22266ddf4223c52cf7498c51020de6b5"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdbc, 0x3, 0x0, 0x1, [{0xdb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdb1, 0x1, "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"}}]}]}, 0xec4}}, 0x0) 02:43:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) 02:43:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) 02:43:43 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9827c) [ 117.913763] random: crng reseeded on system resumption 02:43:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) 02:43:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) 02:43:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) 02:43:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2880, 0x0) 02:43:43 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9827c) [ 117.941702] Restarting kernel threads ... done. 02:43:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) ftruncate(r0, 0x0) 02:43:43 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) [ 118.005708] random: crng reseeded on system resumption [ 118.030481] Restarting kernel threads ... done. 02:43:43 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) 02:43:43 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/237) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x1b}, 0x18) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1a, 0x3, 0x1f, 0x5, 0x0, 0x8, 0x84459, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x7fff, 0x2, 0x5, 0x2, 0x4, 0x5c, 0x0, 0x2, 0x0, 0x6bac}, r3, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)=0x14) 02:43:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 02:43:40 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0e0c0d8 RDX=0000000000000000 RSI=ffffffff81781989 RDI=0000000000000001 RBP=ffff888017e3f580 RSP=ffff888017e3f490 R8 =ffffffff85edffdc R9 =ffffffff85edffe0 R10=ffffed1002fc7eb2 R11=ffff888017e3f568 R12=ffff888017e3f5f0 R13=0000000000000000 R14=ffff888017e3f528 R15=0000000000000000 RIP=ffffffff8120506a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd82f636310 CR3=000000000eca0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88803e107690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f64e15ae700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca57fa7008 CR3=0000000015d80000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f64e411f7c0 00007f64e411f7c8 YMM02=0000000000000000 0000000000000000 00007f64e411f7e0 00007f64e411f7c0 YMM03=0000000000000000 0000000000000000 00007f64e411f7c8 00007f64e411f7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000