Extracting prog: 2h7m47.292928248s
Minimizing prog: 34m40.741278692s
Simplifying prog options: 0s
Extracting C: 1m6.991659682s
Simplifying C: 13m11.289631822s


extracting reproducer from 24 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 30s
testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 5, 5, 3, 7, 9, 13, 3, 4, 4, 4, 9, 6, 4, 6, 6, 13, 3, 4, 3, 8, 8, 21, 23]
detailed listing:
executing program 3:
syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b24020102031801442a82070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0)
executing program 2:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0)
executing program 3:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0) (fail_nth: 1)
executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="19000000e06b4e62b9f522151a83a3106a6279b9479184ae1eb0437a1add", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2515000000080043006b078d66ef83aff9dfb624295ac46478492b81ee7e88b6fa71a0988818f60f54874920e7cc000800000000000074ec49e5033b516549f61b", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044804}, 0x4004) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
executing program 1:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0xf, 0x6, "f82d714db0c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0x18, 0x4048820}, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0x40015b19, 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 1:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './tracing/dynamic_events'}}, {@uuid_auto}, {@uuid_auto}, {@verity_on}, {@metacopy_on}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x200, 0xe2, 0x4, 0x7}, {0x0, 0x10, 0x3, 0x2}, {0x8, 0x1, 0x2, 0xbd}, {0x200, 0x4, 0xdb, 0x5}, {0x2, 0xe, 0x81, 0xf170}, {0xeb, 0x3, 0x10}, {0x162, 0x8, 0x4, 0x3}]})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 0:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 0:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]})
syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <23>
bisect: split chunk #0 of len 23 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4, 9, 6, 4, 6, 6, 13, 3, 4, 3, 8, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './tracing/dynamic_events'}}, {@uuid_auto}, {@uuid_auto}, {@verity_on}, {@metacopy_on}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x200, 0xe2, 0x4, 0x7}, {0x0, 0x10, 0x3, 0x2}, {0x8, 0x1, 0x2, 0xbd}, {0x200, 0x4, 0xdb, 0x5}, {0x2, 0xe, 0x81, 0xf170}, {0xeb, 0x3, 0x10}, {0x162, 0x8, 0x4, 0x3}]})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 0:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 0:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]})
syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 3, 4, 3, 8, 8, 21, 23]
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 0:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 0:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]})
syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: testing without sub-chunk 3/3
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4, 9, 6, 4, 6, 6, 8]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './tracing/dynamic_events'}}, {@uuid_auto}, {@uuid_auto}, {@verity_on}, {@metacopy_on}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x200, 0xe2, 0x4, 0x7}, {0x0, 0x10, 0x3, 0x2}, {0x8, 0x1, 0x2, 0xbd}, {0x200, 0x4, 0xdb, 0x5}, {0x2, 0xe, 0x81, 0xf170}, {0xeb, 0x3, 0x10}, {0x162, 0x8, 0x4, 0x3}]})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
bisect: split chunks (needed=true): <8>, <7>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 4, 6, 6, 13, 3, 4, 3, 8, 8, 21, 23]
detailed listing:
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './tracing/dynamic_events'}}, {@uuid_auto}, {@uuid_auto}, {@verity_on}, {@metacopy_on}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x200, 0xe2, 0x4, 0x7}, {0x0, 0x10, 0x3, 0x2}, {0x8, 0x1, 0x2, 0xbd}, {0x200, 0x4, 0xdb, 0x5}, {0x2, 0xe, 0x81, 0xf170}, {0xeb, 0x3, 0x10}, {0x162, 0x8, 0x4, 0x3}]})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0)
executing program 3:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
executing program 2:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000900)=""/253, 0xfd}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000700)=""/167, 0xa7}, {&(0x7f0000000040)=""/29, 0x1d}], 0x7}, 0x40002102)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f0000000b00)={0x14, &(0x7f00000007c0)={0x40, 0x6, 0x8e, {0x8e, 0x22, "c949b9377fbe214e51856104613cbf20ebfc1f16c0ca21a8c66b884d529359fda3bff32e82c6b6a2b5652cb4a99c05c4b5f6688c642ca714b50e1ce4567dbc60f6d14590aa46dc59e6cee055617fec67ac1f3e77f13c65e2d93c3d8e71c3cad64938551501b60aeaac4dd2b87f697e6e4b3ee9d6f2f18679cc40e4f679343a1c16233c6bbab346330e50bea8"}}, &(0x7f0000000a00)={0x0, 0x3, 0xee, @string={0xee, 0x3, "d36dfba912811d01929c734dd508ddf70c76ea714b0a677924c82e70683428d173cde7cd20e1ea0c1caf911685102206fafdf30730a9c4746445a36d0c37ff1280c170afc6eb5ab2264ad0d0d07e894887b485d2c4c1ac1d02483d0a549c35cdf16e26c3c899ff5d4d9cd357510e157954ff80ee175a11d00ca31902b59662d9e01a03460fc5ee7d4e672a4999288196a0aa98bd2f2061263812b873fe9449b3ee102c8afe981384ec3bea6d01b2b66bf82cf0d0fe1daf6ece575b93e10951e3ade2b5e8733c53a70d19bc619fdc18c4d5d17a7697cec2000dd3a09a6db273a10367c7da0f757faf20585453"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x69, 0x45, "95e03b0b68a4fd7f4ddce07a0cf431a606a16ee3a67a0831455bd80928a63c0c7d3865f6ad77192f1357b01abd17630b380ccf48eda3217b852c786897fa759a5a76e32ff1"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000c40)={0x20, 0x81, 0x1, 'I'}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "9e2878"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "5241f2"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "ef01e3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "02bbcf"}})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 0:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 0:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]})
syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4, 9, 13, 3, 4, 3, 8, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {}, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000300)=""/217)
executing program 0:
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x0, &(0x7f0000000340)})
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 0:
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x7e, 0x60, 0x62, 0x40, 0x5d1, 0x1019, 0x9360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x4, 0xb, 0x10, 0xb4}}]}}, &(0x7f0000000040)={0x61, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x125, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x80, 0x80, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x75}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x52, 0x7fffffff}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xa, "353acf562795"}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0x46, 0x8, 0x888d}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x100, 0x6, 0xfa, 0xfffffeff, 0x4, 0x2, 0x2, 0x9}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x402, 0x4, 0x4, 0x40, 0x0, 0x3910, 0xc, 0x401}, @multiply_unit={0xb, 0x24, 0xd, 0xff, 0xd3, 0xb, 0x67da}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf9, 0x0, 0x25f4, 0x5, 0x40, 0x9, 0x4, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa1, 0x81, 0x1b, {0xa, 0x25, 0x25, 0x5, 0x6, 0x4ee8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0x1, "51e9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d69, 0x530f, 0x18, 0xf7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd, 0x1, 0x7, 0xd7, "", "58e0"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x5, 0x7f, "a0f727e1176d0d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x0, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x10, 0x7, {0xa, 0x25, 0x25, 0x8, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x250, 0x8, 0xe, 0x4, 0xff, 0x81}, 0x17, &(0x7f0000000d40)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x78, 0x8, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0xe, 0x2}]}, 0x2, [{0xe9, &(0x7f0000000d80)=@string={0xe9, 0x3, "30e5a58ca45eb1cad18b16aa72b9d24e700e19dcd18db38a8bfeb4047f467b02a24a15a76a681b27dcc04704685276a09c00f374cba4409d707e4c7e5662fa9acc2f37f3e52652d475c2f72da96dbd7c80893156217478a69ac300cd4ff5e77ac128085035b32929f57b4c2e6b23f01b95cb2058112b5bbc78486da505373c12423cfdc2b22ce1b118ac51a94bc77f980704375dafcee2e97520c37f3678a0a6af3bfd404d1bd8b7cd401301f17c7869c1c038a4278673833ba51b1b94f10f00153edecc2bec94bd235de9a27e0e73cf007b683fdc30aa9548da107e72198e04fd9d2d099e549d"}}, {0x26, &(0x7f0000000e80)=@string={0x26, 0x3, "f57bbd158d05a10163b902a2b8ab25fcbc9dc2e96c2b1e79b0274d20221d40df69ccb39c"}}]})
syz_usb_connect(0x3, 0x7fe, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x1, 0x17, 0x96, 0x10, 0x413c, 0x81a2, 0x5745, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ec, 0x3, 0x7f, 0x5, 0x80, 0x4, "", [{{0x9, 0x4, 0x8, 0x7, 0x9, 0xa0, 0x4f, 0x40, 0x2, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xec, 0x74, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xf}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x9, 0x6, [@generic={0x5d, 0x6, "e7ee55ab42a357cd66c9caec848064327f9fc4aebd82289a10e0fef2562785eb792007dffe32c8d732e8377377d16bc3b808fbdeea274cc34fc5316ab7b0cf9182d690a69f2a934fa6175f0c047ef720f4665b9ba947dfa110d074"}, @generic={0x99, 0x21, "e857ceb74ee4820a7d94cfb5ffbbca62b5ed7c685a8b2504b8af4c56979c7bfc895963dc4cb05b63a10d652a55ba5d835060114c082a799070c6646e3b3f92440be01dc01e9ecc46035f5ed51a2218c332101c2c25878527953d40ccf29f50eadde0d17eb5bdc4f7dc338e4f42781290e950dd88c1d6221d86c38267509797b3601f7aac594f584f39b102c7e3a29f621f5573afefe3d3"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x0, 0x5, 0xb, [@generic={0x1d, 0x3, "b0762976a25399cd8f42a3b3d245b2a87b58c44741c18ece745e01"}, @generic={0xf5, 0x13, "ad3915139ab474608fc5ab63c9521eb6864559c59eae63e29442ffe5352b5eda29a1589e2b5156d60f520d39fe910bf2b3c6b61ec8f1eb44a9b5ea462684af41cac7e7120e2fdcf95debba1658e4c168ea987daec3569c1b017ec7ab28d5783da4af39ec8f5adb53e222b62ddae39b11e63ee66506288dd3a38650c607dd2316263830f1b73e926ca3d04351f436aa874e656d83fe891c12cb3ea74dea6a9129a34883dfca50b9a3a49fcf58a7070f733b69e5df30ba1c71cff8cfdf553b73e0d5c695762a1960f68278ed5e863056e4efe81635ac7a77d5a078c79af47ac177276976b5ae6158fe120a68f3fb06712a26d86f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xf9, 0xc, 0x4, [@generic={0xc6, 0x8, "34fa880a20a3321c78ca921d0b3a06a98b453d7212a0166b9a8c16295131502744184c5836d5411be46be7c87e6a85327ad7d0ecc92fd102ad96ecd619f87a977894e5bf8398877f093dd5b21c398b1a26a22ab138c4495d68bcf84972d1eb2103f74316c4abb0da04115dee18a5b6f3e620d18a43c120eeaa512ce1dbc5728fc78e323b1bc507ac9002509a4b95b38f833d5c0d6c73dd8baf7864fb02f007b7bf1e5d94c483c260edf6734e12d29a3eff01497d4f81ec0dfb4d1b9ebf57a1c275183e48"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x3e, 0x6, [@generic={0x91, 0xa, "d67f28c8b483566e93e8953f970c1c89da666649f4e822a6f881d14bfc796e07d51a80d58d138228ae48b316dc092d2706c8d98afa4986ebe85a026eb314653ae3fadd2fcafc97e3f9a29ddc9399f7640f8f436c251dea1b139a21e8127c77413af17c9bb984530e8d312d09454f4844ea485b5c8b38619251b8d4060d467ac4c593941ad373142a894c544e192617"}, @generic={0x64, 0x10, "5bd5bcd70c1634f8ab661550006eaca3ac859df66b2c99077f9d6ae21285a76f9a6153d9da770eeb3a88b485f1a2a0b129f44619fab076e739ef3ad192843451b8ff45288f1c21d6d2b214d97131c4f8879379b3aaaaec34557958db50627beedb88"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @generic={0x12, 0x23, "a51fe5df587b535e5eefeb502c5004e8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffd}, @generic={0xbc, 0xf, "ae4f91a138657d841d525c89ef476a7c97d84287b93729e88164bdb5db7968c53e0b1e96f64618ad5de65f51a9be6c04c33b6ea298ad84ef67329d55c05e9bb92611d6ac8dc4d54505fa58fc02261a67263a251983b5eec5208689db3f942fbe338ac0047d8b123c5848a344accf63738bd22dec8930bf5c27c13e0197c0ab29eb459f2016b3d2dd41c57c0341bb4df736874e21abefc570f3e1e57ca9769cf72e7e5ec67f7a7a60d4a922654f4fd3b27e3567d88e4620260d5c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x5, 0x7, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x6, 0x2, 0x2}}]}}, {{0x9, 0x4, 0x4d, 0x4, 0x5, 0xff, 0xff, 0xff, 0xb, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0xfb, 0x3, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x50, 0xd7, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x2, 0x8, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xfe, 0x82, 0x9, [@generic={0x8b, 0x21, "bb25448cd888ccf0914bc88f2e1e0b9290d138a0f689659b5c5da756f1f085dc727c81d33ebd0860fd96b5cd750a9bc7897064df2a42d704060ec70fbd3f49418a1acee2ce13f1e2f51adee528f8a3da923073a13d06a4cc2a6c93a2d9c73cb8e7dfadf4f541568f5593927258059668f120271d89d883b4830fb2e032199ba40d8cb0bc69883d497b"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x5}}]}}, {{0x9, 0x4, 0x9c, 0x19, 0x5, 0x36, 0xcf, 0x89, 0x6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e635cb"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x4, 0x5, 0x5c}, {0x6, 0x24, 0x1a, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0x4, [0x9]}, @mdlm_detail={0xed, 0x24, 0x13, 0x3, "69b0f664731c16d60325b6e2ddd6b4ff7d912b784e0e00e94e5a32f6d4379e46742e981f9000f2738db3b7f371f9a676813936aa96e5aed4fb69b8eea193acb21d7c4d48285dfa73582e19320a20588af7bf328c6831586d7b2e9a568d277feb6bd8f9192bf6cc3462891e818b7b4a1bc9569bb08014f6c31af53d993133bfeccea33342a8a8095ca2eb3eff4d48b8ffaf988db97269ff6e0c40285d578631a27a482a2dcbc9d9dbba0126456e4d08f08f526315757f2ca82d17e8abb8ae98b1d0ab1b0497ff47a233702b1a49ad59bc812420335c48c86cd916dd9d2bb21551d8eeddf78ed340d3e0"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa4523854d6e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xee9, 0x3, 0xf313, 0x45}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0x9, 0x24, 0x13, 0xc0, "d055422d17"}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x85, 0x7f, 0xe8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xfd, 0x53}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xd, 0x34, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x7f, 0x3, 0x6c, [@generic={0x4a, 0xe, "aaffb1b96588abbea86545f0130028fc9d20e84b31b2693bf3587677eae59416ce764cdfd62967f13d0ff5f96433330a2f5e0a1c9d7c8279257d16319222fc3ef688ff56172e20e5"}, @generic={0x31, 0xa, "2a0eefe0b9a3b90e420010ce64e2a4e907ab00170f1e9bfdefeb1dc9ee0c56b9eed93ec5d315e0ccffb19e5b8ff88d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xff, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xe59}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x3, 0x5, 0x3, 0x40, 0x2}, 0x39, &(0x7f0000000a00)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0xa0, 0x35, 0xf3, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a9eca8a6ca0f4e38a22ea5ac500ea89d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x59, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xf, 0x2}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1401}}]})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: split chunk #1 of len 7 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 4, 9, 8, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <4>, <3>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9, 8, 8, 21, 23]
detailed listing:
executing program 2:
timer_create(0x8, &(0x7f00000004c0)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000000200)) (async)
syz_usb_connect(0x5, 0x71, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x0, [@generic={0x7, 0x5, "49de57454d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0})
executing program 1:
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x3, 0x8210, 0x0, 0x0}, {0x3f43, 0x0, 0x0, 0x0}], 0x2})
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: split chunk #1 of len 3 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8, 8, 21]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

program did not crash
bisect: split chunks (needed=true): <2>, <2>, <1>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 8, 21, 23]
detailed listing:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4, 8, 21, 23]
detailed listing:
executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunks (needed=true): <1>, <1>, <1>, <1, final>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 5 programs left: 

executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)


bisect: trying to concatenate
bisect: concatenate 5 entries
minimizing program #0 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 4, 8, 21, 23]
detailed listing:
executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'})
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 8, 21, 23]
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 4, 8, 21, 23]
detailed listing:
executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 4, 8, 21, 23]
detailed listing:
executing program 0:
executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
lseek(r0, 0x80ffff, 0x0) (fail_nth: 2)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
minimized 4 calls -> 0 calls
minimizing program #1 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 3, 8, 21, 23]
detailed listing:
executing program 2:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 2, 8, 21, 23]
detailed listing:
executing program 2:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 1, 8, 21, 23]
detailed listing:
executing program 2:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 21, 23]
detailed listing:
executing program 2:
executing program 0:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
minimized 4 calls -> 0 calls
minimizing program #2 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 7, 21, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 0:
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
minimized 8 calls -> 8 calls
minimizing program #3 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 20, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 19, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 18, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0xfd, 0xc8, @any, 0x1}}}, 0xe)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 17, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 16, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 15, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 14, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 13, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 12, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt/ttyUSB0\x00', 0x4002, 0x0) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 11, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 10, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 9, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) (async, rerun: 64)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 8, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 7, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 6, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 5, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 4, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
socket(0x10, 0x3, 0x0)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 3, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x1}}, 0x26)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 2, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 1, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
socket$pppl2tp(0x18, 0x1, 0x1)
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 23]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 0:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program crashed: WARNING in tracepoint_probe_unregister
minimized 21 calls -> 0 calls
minimizing program #4 before concatenation
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 22]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 21]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)
write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 20]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)
keyctl$invalidate(0x15, r4)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 19]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0x4d)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 18]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)
pipe2$watch_queue(&(0x7f0000000000), 0x80)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 17]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
r2 = openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r5 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r4, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r5)
pipe2$watch_queue(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r7, 0x5b)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})
ppoll(&(0x7f0000000280)=[{r1, 0x295}, {r2, 0x641}, {r7, 0x5300}, {r2}, {r6, 0x6c36e4b3f62e4c1f}, {r8, 0x230}], 0x6, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 16]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r3, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r4)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}})

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 15]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r3, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r4)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b)
socket$inet6_mptcp(0xa, 0x1, 0x106)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 14]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r3, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r4)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 13]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r3, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r4)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 12]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
r4 = add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)
keyctl$search(0xa, r3, &(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, r4)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 11]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
add_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="728faa45f209b26fd106c3451cd657c82774555bb61d85e2e34788f98006ec635e296d0aa94aedfdb88bffde85c3d51ac80fbf3765ee2b6b325dae898eacd7c718dfb325549f86c520f946abb4ed4bd6e63ced00e0aeda565b13978cf0215b2858c3f9e1aa60cc6564af277b21b3055c99bea799f5d02cf1b3e64f6e6d1498252f10bf7e8832d8dd9c0d8b5c8c2bb56b", 0x90, 0xfffffffffffffff9)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 10]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 9]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="600f3a0000002790a6064e7b1bd1c43a"], 0x0, 0x0, 0x0, 0x0, 0x0})

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 8]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 7]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)
openat(r1, &(0x7f0000000040)='./tracing/events/s/p/enable\x00', 0x181c81, 0xb2)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 6]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)
read(r1, &(0x7f0000000700), 0xfffffffffffffc2a)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 5]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sysfs/bus/pci/devices/0000:00:03.0/device\x00', 0x0, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 4]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 3]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 2]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 1]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)

program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [0, 0, 8, 0, 0]
detailed listing:
executing program 2:
executing program 1:
executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)
executing program 3:
executing program 0:

program crashed: WARNING in tracepoint_probe_unregister
minimized 23 calls -> 0 calls
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program crashed: WARNING in tracepoint_probe_unregister
bisect: concatenation succeeded
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, 0x0, 0x0) (fail_nth: 2)

program did not crash
testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240), 0x0) (fail_nth: 2)

VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying
program did not crash
extracting C reproducer
testing compiled C program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
simplifying C reproducer
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program did not crash
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing compiled C program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
program crashed: WARNING in tracepoint_probe_unregister
testing program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program crashed: WARNING in tracepoint_probe_unregister
validation run: crashed=true
testing program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program crashed: WARNING in tracepoint_probe_unregister
validation run: crashed=true
testing program (duration=46.5s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-mmap-mkdirat-mount-openat-write-openat-write
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 2)

program crashed: WARNING in tracepoint_probe_unregister
validation run: crashed=true
reproducing took 3h1m58.809105628s
repro crashed as (corrupted=false):
RAX: ffffffffffffffda RBX: 00007fdbf6e25fa0 RCX: 00007fdbf6b9e159
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
RBP: 00007ffcb46f60a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fdbf6e25fac R14: 00007fdbf6e25fa0 R15: 00007fdbf6e25fa0
 </TASK>
wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup
------------[ cut here ]------------
IS_ERR(old)
WARNING: kernel/tracepoint.c:369 at tracepoint_remove_func kernel/tracepoint.c:369 [inline], CPU#0: syz.0.18/5813
WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x1e6/0xa70 kernel/tracepoint.c:515, CPU#0: syz.0.18/5813
Modules linked in:
CPU: 0 UID: 0 PID: 5813 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:tracepoint_remove_func kernel/tracepoint.c:369 [inline]
RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70 kernel/tracepoint.c:515
Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 16 2a 0a 89 c3 31 ff 89 c6 e8 22 32
RSP: 0018:ffffc90004347b28 EFLAGS: 00010293
RAX: ffffffff81c9c38e RBX: 0000000000000001 RCX: ffff888027d53e80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: fffffffffffffffe R08: ffffffff909ba17f R09: 1ffffffff213742f
R10: dffffc0000000000 R11: fffffbfff2137430 R12: ffffffff90854f30
R13: ffffffff81d02120 R14: ffffffff90854f68 R15: 1ffffffff210a9ed
FS:  0000555560eac500(0000) GS:ffff88812486d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdbf6bd0890 CR3: 0000000074bfa000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 unregister_trace_sched_switch include/trace/events/sched.h:220 [inline]
 tracing_sched_unregister kernel/trace/trace_sched_switch.c:87 [inline]
 tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:129 [inline]
 tracing_stop_cmdline_record+0x6d/0xb0 kernel/trace/trace_sched_switch.c:140
 __ftrace_event_enable_disable+0x5bb/0x720 kernel/trace/trace_events.c:907
 ftrace_event_enable_disable kernel/trace/trace_events.c:934 [inline]
 event_enable_write+0x242/0x330 kernel/trace/trace_events.c:1956
 vfs_write+0x296/0xba0 fs/read_write.c:685
 ksys_write+0x150/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdbf6b9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcb46f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fdbf6e25fa0 RCX: 00007fdbf6b9e159
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
RBP: 00007ffcb46f60a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fdbf6e25fac R14: 00007fdbf6e25fa0 R15: 00007fdbf6e25fa0
 </TASK>

final repro crashed as (corrupted=false):
RAX: ffffffffffffffda RBX: 00007fdbf6e25fa0 RCX: 00007fdbf6b9e159
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
RBP: 00007ffcb46f60a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fdbf6e25fac R14: 00007fdbf6e25fa0 R15: 00007fdbf6e25fa0
 </TASK>
wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup
------------[ cut here ]------------
IS_ERR(old)
WARNING: kernel/tracepoint.c:369 at tracepoint_remove_func kernel/tracepoint.c:369 [inline], CPU#0: syz.0.18/5813
WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x1e6/0xa70 kernel/tracepoint.c:515, CPU#0: syz.0.18/5813
Modules linked in:
CPU: 0 UID: 0 PID: 5813 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:tracepoint_remove_func kernel/tracepoint.c:369 [inline]
RIP: 0010:tracepoint_probe_unregister+0x1e6/0xa70 kernel/tracepoint.c:515
Code: e5 4c 8b 24 24 4c 8b 74 24 18 4c 8b 7c 24 08 48 81 fd 01 f0 ff ff 72 64 e9 bb 05 00 00 e8 42 2d fe ff 48 c7 c5 fe ff ff ff 90 <0f> 0b 90 e9 26 08 00 00 e8 8d 16 2a 0a 89 c3 31 ff 89 c6 e8 22 32
RSP: 0018:ffffc90004347b28 EFLAGS: 00010293
RAX: ffffffff81c9c38e RBX: 0000000000000001 RCX: ffff888027d53e80
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: fffffffffffffffe R08: ffffffff909ba17f R09: 1ffffffff213742f
R10: dffffc0000000000 R11: fffffbfff2137430 R12: ffffffff90854f30
R13: ffffffff81d02120 R14: ffffffff90854f68 R15: 1ffffffff210a9ed
FS:  0000555560eac500(0000) GS:ffff88812486d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fdbf6bd0890 CR3: 0000000074bfa000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 unregister_trace_sched_switch include/trace/events/sched.h:220 [inline]
 tracing_sched_unregister kernel/trace/trace_sched_switch.c:87 [inline]
 tracing_stop_sched_switch kernel/trace/trace_sched_switch.c:129 [inline]
 tracing_stop_cmdline_record+0x6d/0xb0 kernel/trace/trace_sched_switch.c:140
 __ftrace_event_enable_disable+0x5bb/0x720 kernel/trace/trace_events.c:907
 ftrace_event_enable_disable kernel/trace/trace_events.c:934 [inline]
 event_enable_write+0x242/0x330 kernel/trace/trace_events.c:1956
 vfs_write+0x296/0xba0 fs/read_write.c:685
 ksys_write+0x150/0x270 fs/read_write.c:739
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fdbf6b9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffcb46f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fdbf6e25fa0 RCX: 00007fdbf6b9e159
RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
RBP: 00007ffcb46f60a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fdbf6e25fac R14: 00007fdbf6e25fa0 R15: 00007fdbf6e25fa0
 </TASK>