Extracting prog: 3h11m0.903961175s Minimizing prog: 33m53.241606032s Simplifying prog options: 0s Extracting C: 47.966271217s Simplifying C: 15m42.483913688s extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VCPU-socket$inet-setsockopt$inet_mreqsrc-setsockopt$inet_mreqn-socket$kcm-sendmsg$kcm detailed listing: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-openat-execveat-getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_GET_FD_BY_ID-getsockopt$inet_sctp_SCTP_RECVRCVINFO-keyctl$instantiate-add_key-add_key$user detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close-socket$inet6_tcp-socket$inet6-prlimit64-sched_setscheduler-getpid-syz_emit_ethernet-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-sched_setaffinity-recvmmsg-mkdirat-mount-chdir-mkdirat-renameat2-setsockopt$inet6_mreq detailed listing: executing program 0: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-renameat2-syz_open_dev$sg-syz_open_dev$sg-mmap-openat$cgroup_root-unshare-fchown-syz_open_dev$video4linux-ioctl$VIDIOC_SUBDEV_S_FMT-socket$nl_netfilter-sendmsg$NFT_BATCH-openat$sysfs-setsockopt$inet_tcp_buf-socket$inet_tcp-setsockopt$EBT_SO_SET_ENTRIES-readv detailed listing: executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpgrp-sched_setaffinity-getsockopt$bt_BT_POWER-prctl$PR_SCHED_CORE-getpid-mmap-syz_clone-prctl$PR_SCHED_CORE-read$msr-sched_setaffinity-mkdirat-mount-mkdirat-openat-bpf$BPF_PROG_WITH_BTFID_LOAD-socket$inet6_udp-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-mkdirat-openat-write detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9, 5, 2, 22, 17, 4, 3, 23, 21, 18, 6] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd ex/c ', 0x26) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000000100)}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080012"], 0x4c}}, 0x24000004) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fstat(r4, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'tX-wX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) lsm_set_self_attr(0x64, &(0x7f0000000400)=ANY=[], 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) executing program 1: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VCPU-socket$inet-setsockopt$inet_mreqsrc-setsockopt$inet_mreqn-socket$kcm-sendmsg$kcm detailed listing: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-openat-execveat-getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS-bpf$BPF_BTF_LOAD-bpf$BPF_BTF_GET_FD_BY_ID-getsockopt$inet_sctp_SCTP_RECVRCVINFO-keyctl$instantiate-add_key-add_key$user detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): close-socket$inet6_tcp-socket$inet6-prlimit64-sched_setscheduler-getpid-syz_emit_ethernet-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-sched_setaffinity-recvmmsg-mkdirat-mount-chdir-mkdirat-renameat2-setsockopt$inet6_mreq detailed listing: executing program 0: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-renameat2-syz_open_dev$sg-syz_open_dev$sg-mmap-openat$cgroup_root-unshare-fchown-syz_open_dev$video4linux-ioctl$VIDIOC_SUBDEV_S_FMT-socket$nl_netfilter-sendmsg$NFT_BATCH-openat$sysfs-setsockopt$inet_tcp_buf-socket$inet_tcp-setsockopt$EBT_SO_SET_ENTRIES-readv detailed listing: executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpgrp-sched_setaffinity-getsockopt$bt_BT_POWER-prctl$PR_SCHED_CORE-getpid-mmap-syz_clone-prctl$PR_SCHED_CORE-read$msr-sched_setaffinity-mkdirat-mount-mkdirat-openat-bpf$BPF_PROG_WITH_BTFID_LOAD-socket$inet6_udp-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-mkdirat-openat-write detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9, 5, 2, 22, 17, 4, 3, 23, 21, 18, 6] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd ex/c ', 0x26) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000000100)}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080012"], 0x4c}}, 0x24000004) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fstat(r4, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'tX-wX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) lsm_set_self_attr(0x64, &(0x7f0000000400)=ANY=[], 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) executing program 1: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 22, 18, 22, 15, 5, 22, 23, 20, 9, 5, 2, 22, 17, 4, 3, 23, 21, 18, 6] detailed listing: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd ex/c ', 0x26) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000000100)}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080012"], 0x4c}}, 0x24000004) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fstat(r4, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'tX-wX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) lsm_set_self_attr(0x64, &(0x7f0000000400)=ANY=[], 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) executing program 1: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 5, 2, 22, 17, 4, 3, 23, 21, 18, 6] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd ex/c ', 0x26) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [], {0x14}}, 0x28}}, 0x0) executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{&(0x7f0000000100)}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f0000000100)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x38d6, 0x68282) syz_open_dev$sg(0x0, 0x0, 0x9840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x28040600) fchown(r1, 0xee00, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x7f, 0x8, 0x3007, 0x0, 0xb, 0x4, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000080), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x7, 0x196, [0x0, 0x80000200, 0x80000336, 0x80000676], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x4a, 0xf8, 'veth1_to_team\x00', 'team_slave_1\x00', 'syzkaller1\x00', 'netpci0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x96, 0x106, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x4, {{0x1}}}], @common=@NFLOG={'NFLOG\x00', 0x4c, {{0xffffff18, 0x2, 0xffff, 0x1, 0x0, "306bebdfbedecbfda350624e999ca3b07699b038639f0aa2d9f2d196d5bf7702500dcb9491be48cd1bfa3f56469dbfe1509c5fc8d3c3616473a1a8bbba5a137e"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x21e) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000180)=""/10, 0x2}, 0x20) executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080012"], 0x4c}}, 0x24000004) executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fstat(r4, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'tX-wX\xf7\xc4\xe1L\xb9\xa1\x0e\xdb\x8bj\x8c\xe7\r\bP\xd6\xf4D\x0f\xd0\xb8\xbdh-\xb3aKo~\xa7\x17\xaf\xfd\x89l\xe5\\#\x90\xbf\xba\xb7!\x8e\x17\xa0\xe2\xa5\x88O\xc7p\xdd\xf7\xd5\x17\x8d\xfb\xde>\xb5'}]}, 0x4e) lsm_set_self_attr(0x64, &(0x7f0000000400)=ANY=[], 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) executing program 1: close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 4: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <10>, <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 5, 22, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program did not crash bisect: split chunk #1 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 5, 22, 23, 20, 9] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine bisect: testing without sub-chunk 2/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 4, 22, 15, 14, 15, 5, 22, 28, 15, 11, 22, 18, 22, 15] detailed listing: executing program 2: waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) close(0x3) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r3, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) executing program 4: syz_80211_inject_frame(0x0, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x1a3143, 0x101) r1 = socket(0x8, 0x0, 0x7ffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x100000000000000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000001ac0)=[{0x0}], 0x1, 0xe7b, 0x3, 0xb) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) program did not crash bisect: split chunks (needed=true): <5>, <5>, <5>, <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 14, 15, 5, 22, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="0000000009021a0001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007", 0x30) io_uring_enter(r1, 0x155e, 0x7d33, 0x8, &(0x7f0000000080)={[0x3]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r2, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) fsopen(&(0x7f0000000280)='hfs\x00', 0x1) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="a8a5ed15bfbb7a44aea20305ae61dc6c30e016"], 0x8, 0x0) executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af9, &(0x7f0000000380)={0x0, 0x146, 0x13090, 0x10, 0x125}, &(0x7f0000000140), &(0x7f00000005c0), &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="0100"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="7cd5", 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 14, 28, 15, 11, 22, 18, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d4"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #2 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 14, 28, 15, 22, 15, 5, 22, 23, 20, 9] detailed listing: executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d4"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #3 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 14, 28, 15, 22, 15, 20, 9] detailed listing: executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 1: listns(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r0, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x103801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2102, r2}, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x24c01, 0x80) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 14, 28, 15, 22, 15, 5, 22, 23] detailed listing: executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)="2d76b4", 0x3) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x2f6) close_range(r0, 0xffffffffffffffff, 0x0) executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <2>, <2>, <2>, <3> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 28, 15, 22, 15, 5, 22, 23] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x140, 0xfffffff0, 0x1000, 0x7, 0x8000001, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x102, 0x400, 0x6, 0x9, 0x8000007, 0x2, 0x80000a, 0x9, 0x40003, 0x201000, 0xab, 0x100000, 0x8, 0x7, 0x8]}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x0, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff8, 0x400001, 0x6, 0x400, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000880)={{r0}, "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"}) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 15, 22, 15, 5, 22, 23] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c6241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c75650063"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB="010000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) statfs(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/184) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x7fffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #2 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 15, 15, 5, 22, 23] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #3 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 15, 15, 23] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Test Gadg', 0x9) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 15, 15, 5, 22] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540), 0x0, 0xf00) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: split chunks (needed=true): <1>, <1>, <1>, <2> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #3 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 15, 15, 22] detailed listing: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1, final>, <1, final>, <1, final>, <1> bisect: split chunk #3 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 4 programs left: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdc6d17eb847d", 0x1d}], 0x1}}], 0x1, 0x4044805) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 4 entries minimizing program #0 before concatenation testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) write$binfmt_aout(r8, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0xbc23, 0x10000, 0x0, 0x1d2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe911, 0x4, 0x1, 0x21b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x0, 0x19b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5af3, 0x2, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x10000, 0x0, 0x2ee, 0x0, r1}}], 0x4, &(0x7f0000003900)={0x2e, 0x49, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) write$binfmt_aout(r7, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) write$binfmt_aout(r7, 0x0, 0xffffffdb) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) write$binfmt_aout(r7, 0x0, 0xffffffdb) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) dup(0xffffffffffffffff) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f00000002c0)={0x0, 0x9e0, 0x40, 0x3, 0x168, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf13e, 0x80000, 0x1, 0xa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e42, 0x800, 0x0, 0x352}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b9, 0x40, 0x3, 0x17c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a68, 0x4, 0x1, 0x3d7}}], 0x4, &(0x7f0000001a00)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x34b4}, 0x0, r5, '\x00', {0x2, 0x96, 0x0, 0x0}}, 0x0) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400), &(0x7f0000000040), &(0x7f0000000240)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9f8a21c9f02d789f2f44071a8126349a0782e357efe0d1548494a52b504e37e181adb52bc923caae1ca01c9daa0d802713a0dc40b1947b9d10ad650ba34e85d1a6b990f6a328a669207131b211c049391792bf6d9ca8c757d539eec47fcf87db007658446e09c7c27fa89609d80119407923634c57c00a1be63ab1f3407cff2d9280738311c677c7df2517b7071062a706676ba35ee2d56b8f06c697e105aab58779a4b4207ef4f61fb912e9f6ebe6890d9b5b1631ae4da4fdbfc25dc020b800f14a463db5954aef91dd", 0xca}], 0x1}, 0x0) syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 15, 15, 22] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15, 15, 22] detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: r0 = syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host minimized 14 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_socket_connect_nvme_tcp() syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 15, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 0: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close(r0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host minimized 15 calls -> 1 calls minimizing program #2 before concatenation testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 14, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 13, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 12, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 11, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 10, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 9, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 8, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 8, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 7, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 6, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) fchdir(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 5, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 4, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 3, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 2, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 22] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 0: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 4: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host minimized 15 calls -> 1 calls minimizing program #3 before concatenation testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 21] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 20] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_usb_control_io(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 19] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 18] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x7ffff004) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 17] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 16] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 15] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 14] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write(r3, &(0x7f00000000c0)="adff652cd167a2889cddcbc592b13ad007602b68d0d219b89bf30788e6651fff9aa846df10cfa9a94a0a42c3ac2dc2bd29997fd3ad3ace51a7524d2febe257f2a9cecc89b41be5af3769cea1de180e2bd09491eff16008c279af71aec35cce0165ade83621c7f06250401ffaebc8a96da493ba02c7c398643eeb8204fbba2f2449", 0x81) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 13] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 12] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 11] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$inet_tcp(0x2, 0x1, 0x0) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 10] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 9] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 8] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 7] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 6] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 5] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 5] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 4] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 3] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 3] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 1, 1, 3] detailed listing: executing program 2: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) executing program 4: syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) executing program 2: mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash minimized 22 calls -> 4 calls testing program (duration=2m31.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-mmap-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host bisect: concatenation succeeded found reproducer with 8 syscalls minimizing guilty program testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-mmap-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-mmap-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-mmap-syz_usb_connect-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-mmap-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_ublk_setup_io_uring-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_ublk_add_dev-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_ublk_setup_io_uring-syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: syz_ublk_setup_io_uring(0x120, &(0x7f0000000340)={0x0, 0xf631, 0x1000, 0x0, 0xe5}, &(0x7f0000000400), &(0x7f0000000040), &(0x7f0000000240)) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=2m11.283242358s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host simplifying C reproducer testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program did not crash testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program did not crash testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program crashed: BUG: sleeping function called from invalid context in mmc_free_host testing compiled C program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io program did not crash testing program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true testing program (duration=2m11.283242358s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in mmc_free_host validation run: crashed=true reproducing took 4h6m7.203243077s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 preempt_count: 0, expected: 0 RCU nest depth: 2, expected: 0 locks held by ktimers/0/16: 5, last CPU#0: #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: timer_base_lock_expiry kernel/time/timer.c:1502 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 kernel/time/timer.c:2384 #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 kernel/locking/spinlock_rt.c:57 #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x31b/0x470 kernel/sched/core.c:9257 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage syzkaller #0 Tainted: G W ----------------------------- kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 locks held by ktimers/0/16: 5, last CPU#0: #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: timer_base_lock_expiry kernel/time/timer.c:1502 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 kernel/time/timer.c:2384 #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 kernel/locking/spinlock_rt.c:57 #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 stack backtrace: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6972 __synchronize_srcu+0x157/0x2f0 kernel/rcu/srcutree.c:1464 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x127/0x3d0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ------------[ cut here ]------------ Voluntary context switch within RCU read-side critical section! WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc1d/0xe70 kernel/rcu/tree_plugin.h:332, CPU#0: ktimers/0/16 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:rcu_note_context_switch+0xc1d/0xe70 kernel/rcu/tree_plugin.h:332 Code: 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 30 02 00 00 41 80 3f 00 0f 84 18 f5 ff ff 90 0f 0b 90 e9 0f f5 ff ff 48 8d 3d 73 8a 09 0e <67> 48 0f b9 3a e9 ab f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 79 f4 ff RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 RAX: 0000000000000000 RBX: ffff88801cac0ba0 RCX: 8000000000000002 RDX: 0000000000000000 RSI: ffffffff8bcc2e60 RDI: ffffffff8fb55870 RBP: dffffc0000000000 R08: ffffffff8fb2067f R09: 1ffffffff1f640cf R10: dffffc0000000000 R11: fffffbfff1f640d0 R12: ffff88801cac0000 R13: 0000000000000000 R14: ffff8880b863d340 R15: ffff88801cac04c4 FS: 0000000000000000(0000) GS:ffff888125bcb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff5450dc48 CR3: 0000000037c02000 CR4: 00000000003526f0 Call Trace: __schedule+0x28f/0x5700 kernel/sched/core.c:7131 __schedule_loop kernel/sched/core.c:7354 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7369 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2ca/0x5e0 kernel/sched/completion.c:153 __synchronize_srcu+0x23b/0x2f0 kernel/rcu/srcutree.c:1477 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x127/0x3d0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 48 c1 e8 03 shr $0x3,%rax 4: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 8: 84 c0 test %al,%al a: 0f 85 30 02 00 00 jne 0x240 10: 41 80 3f 00 cmpb $0x0,(%r15) 14: 0f 84 18 f5 ff ff je 0xfffff532 1a: 90 nop 1b: 0f 0b ud2 1d: 90 nop 1e: e9 0f f5 ff ff jmp 0xfffff532 23: 48 8d 3d 73 8a 09 0e lea 0xe098a73(%rip),%rdi # 0xe098a9d * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 ab f4 ff ff jmp 0xfffff4df 34: 90 nop 35: 0f 0b ud2 37: 90 nop 38: 45 84 ed test %r13b,%r13b 3b: 0f .byte 0xf 3c: 84 79 f4 test %bh,-0xc(%rcx) 3f: ff .byte 0xff final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 preempt_count: 0, expected: 0 RCU nest depth: 2, expected: 0 locks held by ktimers/0/16: 5, last CPU#0: #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: timer_base_lock_expiry kernel/time/timer.c:1502 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 kernel/time/timer.c:2384 #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 kernel/locking/spinlock_rt.c:57 #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x31b/0x470 kernel/sched/core.c:9257 __cancel_work_sync+0x6d/0x110 kernel/workqueue.c:4561 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage syzkaller #0 Tainted: G W ----------------------------- kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 locks held by ktimers/0/16: 5, last CPU#0: #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 kernel/softirq.c:186 #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: spin_lock include/linux/spinlock_rt.h:45 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: timer_base_lock_expiry kernel/time/timer.c:1502 [inline] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 kernel/time/timer.c:2384 #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __rt_spin_lock kernel/locking/spinlock_rt.c:50 [inline] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 kernel/locking/spinlock_rt.c:57 #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 kernel/time/timer.c:1745 stack backtrace: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6972 __synchronize_srcu+0x157/0x2f0 kernel/rcu/srcutree.c:1464 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x127/0x3d0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ------------[ cut here ]------------ Voluntary context switch within RCU read-side critical section! WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc1d/0xe70 kernel/rcu/tree_plugin.h:332, CPU#0: ktimers/0/16 Modules linked in: CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:rcu_note_context_switch+0xc1d/0xe70 kernel/rcu/tree_plugin.h:332 Code: 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 30 02 00 00 41 80 3f 00 0f 84 18 f5 ff ff 90 0f 0b 90 e9 0f f5 ff ff 48 8d 3d 73 8a 09 0e <67> 48 0f b9 3a e9 ab f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 79 f4 ff RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 RAX: 0000000000000000 RBX: ffff88801cac0ba0 RCX: 8000000000000002 RDX: 0000000000000000 RSI: ffffffff8bcc2e60 RDI: ffffffff8fb55870 RBP: dffffc0000000000 R08: ffffffff8fb2067f R09: 1ffffffff1f640cf R10: dffffc0000000000 R11: fffffbfff1f640d0 R12: ffff88801cac0000 R13: 0000000000000000 R14: ffff8880b863d340 R15: ffff88801cac04c4 FS: 0000000000000000(0000) GS:ffff888125bcb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff5450dc48 CR3: 0000000037c02000 CR4: 00000000003526f0 Call Trace: __schedule+0x28f/0x5700 kernel/sched/core.c:7131 __schedule_loop kernel/sched/core.c:7354 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7369 schedule_timeout+0xc0/0x2c0 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:100 [inline] __wait_for_common kernel/sched/completion.c:121 [inline] wait_for_common kernel/sched/completion.c:132 [inline] wait_for_completion+0x2ca/0x5e0 kernel/sched/completion.c:153 __synchronize_srcu+0x23b/0x2f0 kernel/rcu/srcutree.c:1477 wakeup_source_remove drivers/base/power/wakeup.c:201 [inline] wakeup_source_unregister+0x127/0x3d0 drivers/base/power/wakeup.c:237 mmc_host_classdev_release+0x47/0x100 drivers/mmc/core/host.c:69 device_release+0xc4/0x1f0 drivers/base/core.c:-1 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x222/0x550 lib/kobject.c:737 call_timer_fn+0x18d/0x5f0 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers kernel/time/timer.c:2374 [inline] __run_timer_base+0x67b/0x9b0 kernel/time/timer.c:2386 run_timer_base kernel/time/timer.c:2395 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2405 handle_softirqs+0x1da/0x6d0 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] run_ktimerd+0x6a/0x100 kernel/softirq.c:1174 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess): 0: 48 c1 e8 03 shr $0x3,%rax 4: 0f b6 04 28 movzbl (%rax,%rbp,1),%eax 8: 84 c0 test %al,%al a: 0f 85 30 02 00 00 jne 0x240 10: 41 80 3f 00 cmpb $0x0,(%r15) 14: 0f 84 18 f5 ff ff je 0xfffff532 1a: 90 nop 1b: 0f 0b ud2 1d: 90 nop 1e: e9 0f f5 ff ff jmp 0xfffff532 23: 48 8d 3d 73 8a 09 0e lea 0xe098a73(%rip),%rdi # 0xe098a9d * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: e9 ab f4 ff ff jmp 0xfffff4df 34: 90 nop 35: 0f 0b ud2 37: 90 nop 38: 45 84 ed test %r13b,%r13b 3b: 0f .byte 0xf 3c: 84 79 f4 test %bh,-0xc(%rcx) 3f: ff .byte 0xff