Extracting prog: 2h34m32.045290331s Minimizing prog: 18m55.631913197s Simplifying prog options: 0s Extracting C: 32.851997294s Simplifying C: 12m41.625099099s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-openat$sequencer2-ioctl$SNDCTL_SEQ_RESET-ioctl$TIOCVHANGUP-socket$key-syz_init_net_socket$nfc_raw-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-getpeername-accept-sendmsg$key-sendmsg$key-sendmsg$key-sendmsg$key-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$sierra_net-syz_usb_control_io detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1 detailed listing: executing program 0: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_usb_connect-mkdirat-mount$fuse-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-close_range-openat$kvm-mount-syz_usb_control_io$printer detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$inet_int-setsockopt$inet_int-sendto$inet-recvfrom$inet-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 4, 15, 9, 3, 16, 30, 15, 10, 10, 15, 22, 7, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_usb_disconnect(r0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0xf5e2, 0xffffffc4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x2, 0x4, 0x7, 0x7ff}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') executing program 3: syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f40100008c4ab532f541da41e3919ffe37976df838658f4a34f2a2ff6174dad2b5844397206060ceac50e3dc5e4c9b21a13fb0b0d24b937f079f23705152efc33643e73afc6e254be896fe3ab6c62f09cea431588166456a2fdde2c4a0d5141d4e8772f79169064652f1eeb76255acd341143565b0be18ca0d86dd60d3691d23d1849c0abe7d6800000000f23a75a7821fde4e75e8854849ac10b7c2d6958625477e862e22fe3dc3d03ed385ce3978af019f213feb32b673573e26c05eb7d589c09f86f56893f331ef1dbfc5d8779e", @ANYRES16=r4, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}]}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="09012dbd7000fcccdf253500000008000300", @ANYRES32=r5, @ANYBLOB="0a000600505050505050000014005500914de451964ca70c45eb22a10463b242"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r2, 0x6410) (async) sendfile(r0, r1, &(0x7f00000000c0)=0x401, 0x84) (async) sendfile(r1, r0, &(0x7f0000000100)=0x5e4c, 0xbf) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002180)={0x18, 0x0, r3, {0x1}}, 0x18) recvfrom$llc(r2, &(0x7f00000021c0)=""/16, 0x10, 0x20, &(0x7f0000002200)={0x1a, 0x17, 0x9, 0x4, 0x81, 0xf, @broadcast}, 0x10) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0xc1, 0x1, 0x1e}, 0x18) r5 = openat(r4, &(0x7f00000022c0)='./file0\x00', 0x102, 0x6b) mkdir(&(0x7f0000002300)='./file0\x00', 0x2) (async) fsync(r1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x0, 0x0) (async) rename(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000002440)={&(0x7f0000002400)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) fanotify_mark(r5, 0x200, 0x1, r6, &(0x7f0000002480)='./file0\x00') (async) linkat(r2, &(0x7f00000024c0)='./file0\x00', r5, &(0x7f0000002500)='./file0\x00', 0x400) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000002580)={0x6, 0x0, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) (async) setxattr$trusted_overlay_origin(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), &(0x7f0000002640), 0x2, 0x3) (async) r7 = syz_open_dev$dri(&(0x7f0000002680), 0x3ad, 0x4082) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f00000026c0)={0x0, 0xe37c, 0x1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002ac0)={r8, "061c8d45ccfa343c6552cd8b95091394"}) (async) lstat(&(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r9, &(0x7f0000003b80)="4f87820c0fef408a57ffba5936886fc66f8e91840ce32321f9a605e5f7bff39b847075f3711d49af4385d581b23ce99d0589b7e09b86d33888d32022649467c265c4fe6bbcd0a587bd1ebed95f1e7f7870b47fdcd7bd8682e7d28d19c0efa2079c1e8960efc0e0fc8149b3b5135620f870c0dfdeb34a553886de7d659b99acb7b67cf0143ad8beee26cfa79cc45c1adcc2d6daf2687f98501f69ed51a5", 0x9d, 0x4000000, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_connect(0x2, 0x19e, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x1f, 0x93, 0xa2, 0xff, 0x15c5, 0x8, 0xc581, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x1, 0xff, 0x7, 0x90, 0x9, [{{0x9, 0x4, 0x82, 0xe2, 0x7, 0x15, 0x8f, 0x50, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '#'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x7, 0xff}, {0x6, 0x24, 0x1a, 0xf00a, 0x2}, [@acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0xdefa}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9dc, 0x5, 0x53, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x9c, 0x7f, [0x7, 0xfff8, 0x0, 0x5, 0xd, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x2, 0xee1709e41bda8f25, 0xc0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xc9e}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xa, 0x4, 0x8, [@generic={0x62, 0x9, "7be58d70ee178fe1c99952a2afa7aecf763580222190165d9a011ad3894d92939836ca59e127ed8cc091a89f36f84f786360ed8629998cc299f15e14a911c71b391dacb2e135ae75e964ed1e96057ce99cdea124a4e9f071d71a3b5b3c2d960c"}, @generic={0x6a, 0x34, "24b4901f21e04055777a39d02f6c936ecca2dc3da6b545c8f133d758066c7a3e99361b53c88ae2c6d9906abd7984555e0afd29d3b2458f6bc9477575014d502775d58acb8f39a72c63d453b4cd4fe0d682ed5ef5b47f2968c253baebcc4b17a07c32f7c811164852"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x18, 0xfa, 0x5, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0xb, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x5000}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x3, 0x2806}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x2, 0x81, 0x5, 0xb7, 0x6}, 0xfe, &(0x7f0000000580)=ANY=[@ANYBLOB="050ffe0001f9100b1e3b946f4020bc51343a903a119e246dbfb61700578352e5a59ca4d1be01b056dcd4d559a8d7297deb12fbfaaaf8530e9676f85f9b88f9aac8695f3ceb24a25a3cb7be9d53795542d022abec3bbaf4b81f46ab49b49b9671d5b97ccbca01c16245f13a87412cbad5ca97156d0100000015df15461b1bb374c85cd2e098ecb2761139b8b8c377006c6ad5bc184424d35077b25fdeec454e1a8668841ca34b11455dce350fe97645f824dc1b16082f8303654ee1186ee8d5ffc62db220d0ce49bb5078429c4b7d606724c185a08de19df984e0b0fd608e14a6e08bd5b627291dcb43b279533bfc27588374227fee2b3fd9"], 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44b}}, {0x5f, &(0x7f0000000840)=@string={0x5f, 0x3, "ef89f4f9e63232729d1503a68689735ef977fea0e322345aa84422a2b6bbace8713cd96d781274dba61313ffd07ff6382635398d5512003f869e7ddb62b83d88d6fb869537193b5dea3ce49f5dbd177abcccb94976096e2dadfc36b802"}}, {0xee, &(0x7f00000008c0)=@string={0xee, 0x3, "5181cade3230306654dce416bbbf66daefe44ec152784b95ca99c58200ae58341b2ad1a287ee4f211b43f67667597e056ec7644e73a3c74043d9e547bd6e96375ffc9073fe694819b680a2d1b41b7de9f5d38033cc00b7bee4d33257ef98e048b1f5c280c348565b89d96709724cbf0f28cac360a73941c3682e46c80d144991456f72c2f78d5d2bee6a2249d53e1ac9f9a47e06094137190d96aac825caed5b393a80c44470d39b5717a024ee8487dea893df0e82b7acb6291a648da906010f074f2364fbc1ae1f1d5d7aa0ee8aaf6c16e2c8785f69fe421845a878157883febbef8ba1ca642ad9cd90cd43"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x813}}, {0x10, &(0x7f00000009c0)=@string={0x10, 0x3, "7fab25bf1a0f4cb44c07cae89a76"}}]}) r1 = syz_open_dev$usbmon(&(0x7f0000000800), 0x3, 0x8800) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/552, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x804000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xffffffff, [0x3, 0x3], 0xb4f6}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, &(0x7f0000000340)={0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x6) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000700)={0x5, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x3, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x3, '\x00', 0x9}, {0x5, 0x8, 0x0, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0xd}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x1, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x8, '\x00', 0x8}, {0x9, 0xe0, 0x12, '\x00', 0x1}, {0x5c, 0x8, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xed, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x42}]}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x5, 0x0, 0x42, @private1, @mcast1, 0x8, 0x8000, 0xfffffffd, 0xfffffff5}}) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000140)={0x8d, 0x29, 0x1, {0x8, [{{0x4, 0x1, 0x7}, 0x81, 0x7, 0xd, './file0/file0'}, {{0x10, 0x1, 0x7}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x4}, 0x9, 0x5, 0x7, './file0'}, {{0x0, 0x2}, 0x8, 0x5, 0x7, './file0'}]}}, 0x8d) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040345340000000000b4eae6c10b95f440361ae64e8be6a517325c48812b84fddc37be816ff6b0deccb61ebd4cf0"], 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000004780)={0x18, 0x0, 0x0, {0x6}}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001000)=@nullb, 0x0, &(0x7f0000002c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x89b1, &(0x7f00000000c0)={'bond0\x00', @ifru_settings={0xfffffefc, 0x454b, @fr=0x0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1e, 0x7f, 0x1, 0x0, 0x9, 0x1ed, 0x2, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000004c0)={0x0, 0x399aeff3d39f41f5, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x1b, "55b459477f48015bfe1f9bac7d36860831868671d98c5b580619f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="ea4e065fb8772cb56d2bfd1dbba32291ff7de2b3f814949463cf40a5979bcb7bd6bc0c5572be83458799127cdc4e3cb04b1509a2e92b8fa0e713821cc04436b818db4be54787d01253aa75da822a307c23caf70bca7c16d7d0a440028bfad32b9150066bc38760c12bef8ffc7d7a62bc881eefb25ccae6bd340adb936731b4b4e1d79ef4c61e7447ac89e4d42458886cdc1469b843c5dd1d2c3e97872f0a5c5e2c434fd647a6e077716c92b0827a2058e0e27db219389e9b0d326c13580692052deaa98442d757bb1096ff4544d49f8cdb926c220f8715f9d72b8d46edc07f9db757a1a4199cd3a142c2a8c695da03f8709371e98cf0df3fa7654edf7e90222ddf8029c676a4a2f0b7ad177f561cb9c0001b9939da97c2ab14aae9b2108157e402d1b0102c9bd785344164a45a81f62e54d3e0f96b4ca6482a4bdb055c5fbab7f37ed8908fa2a1792f21d22532c6abfb23ebe45bc204026361869acc85979999d33a2655d4d42112f57f9bca2f11eb37d967e40b327fff54eb28348d49546a3fb2b89f2dc3c70c701e0272591f774ac3c0e9809e7b1ff33b3c67ffac2923798adbacc6c333c4ebd687576b3a1f425df328d675b60b0c03e51d010b3119a07ea418faea0b83860d1a072958d7045166460f357aba9efc91e13eacbf79b345b349e09b055ce6eddc92dd1a64d988a9b6c8af35c9982b57b54363e405d44c5ebe8ebeb81adb97dbe11159a8c08ed39c463188caff998fad9f9995a73ec388c2bb6767c7cf4f721e409a8e3e8227455e32bd0b2fae4d33b9201c58b98bcb2e9ca87c2878e5fa4157db9381521bc88648866460a160b053a3f3c7eccadc411abdfa964a2a4a9dd3eeb96f8f5ea35570a8299817b5ee1e6a696985e136253265fb8cc2f3e5bd57cab6c587eefda510db8605b654bb5a89595368f384a11e329e5530629f0bcfc8264b3246e6b24181d65aa09d54d2b791404a9cbb7bc75af635f36eef432e41393e6cce2ed4adfd88ac7c5c06c307ad46d569434224e2bcc008b906471ead2941d812433e6b2280e3d23cb1905d49534922c40a09d074a193e3e408e20bff0c103e0bcf26b0f595874e6db79e703c6a34133676ee44c6bc189566a2731b324f4270e668b03095ec8397274e97fad4eaded6871817c51b856fe7c5fce914acd3c8e9065b63de008021a6319518109a6171ea209782f8cf329959a87665e58a67d655f693aa74034a325dd37efab1e4632534959ace1a7810b4d7c88c2b6ac8c61ab941ee9ec646da80b45c2ae195d4de28a371ffefd2c903026f963ef9342d4cea2bfbcc981456c651f84951544d836791cd28ae93cc807fc6196ff473d77b288c65625c913b16928a07212a4756273a74b93dc0ba57083a47dd16bb0ebf6235700ee1da6244963cdc38527cc6319f4ca561cc4e7fa56acfaa074bc68c3c230d870e0d9a92613cafc0d541d830b981b5181d41f0ed27bb27ae27cc11cf995a48edba21507d189d9dc16afcadb1a896eded3e02c8a75cef0ea0c84b702e330030d0cbb31af5322af50d189e8dac1fde45ff1f9e4abe47e4d4cd7f64c054d02b75f94dcb32f02bb85e06369fd9ff30e423f684f58f2851b3c7d2f4193be6c18133d644752f280c9c9f55130985975a1815f9d4d95d46585212081c5cd952597ace1f807e048041ee92894bf6fb9f9a95de9f8d1ec3b963f097e00ef2e09b7f98203a8087983df270d6ef6e42080b29c59992f5cfe73ec76049f88694e31e2c147f042b7ec5aeb7fd1916cee3cc10ca1aec8fc477d55e0363c9da3269b51bd1006772f094123431e7eca505a7e91b5ff4b44dd1aac91559bb33e5b444301b5ffbbbf384eb70c59a2544d32b83d3d4d746a11e57fe637560d55ea67a7144cb5ed2d7c600824033c9ddd3e0dd7adbcd7887495294d6bdeb69d3bdd9f2218199ab2bef840aeec4fab3dc6b233a370331913b5f892fc4ba77b6e8d1f46cd813f5317f2794ddeca5bfbd3e375ffa43b136baab600a5d5c8df544910b871b0ff299442ee0fe002f3d3c47d974b83ab275eaedbbecb8401701fd4f7487eb31c15ce029026c349620c937bdad23f5b48ded917fe2be55d01a55b3b60324adb7fb6e72d3efe052d3e36ead85a1e1fd54b07578f20b3c22762a6d9878bbff89ac0cdc013e1604188b9010e9b5cab4c12483bd039f3991359b9f28dfb5b0ae0515f91bc19687801aaf2e3b042bec463a07de8c87439970743145a5c8cdd56d21e9e79293370db7af003160a70c9db196f8f737756baa7738924f01e69e9988da2ca30618f1860e58602f681e271994931aca523a1b61440cc6fbdcecb6da8b93f04b069d8bd9291aaa8041d31454a93cf0198abc8b1e6d6696a69302aecbdf00aa6b72e436eb7c2cbd7851bf1f399f2425a8bc11778a2d009d4aed84201ba6f31dfb06461563b53a8473082db6ae7abe8a0bc08cc54df9f02a25491beb8480180ff073ae13b3b902caff42624f565937b63c93c98be8e9b52c312ac60097aafe5a2e03cef3c02bbda17aaaaf860a444a7fa8ab77961db692374e4973da4dabc3b4041e3c9cbf7311bc34dd1a4f8ca01d481d054487301976e9966d036575e4ccceeafdb99bc29e9bf2f6f45dc5e6eb3b04b5f85cad239c7b27d590640bd577e400ae130975d31d68cca48433ce8b3e8e8116be660ca5d3df022944c2da5aff48d74be6b136d755c8f736c07612faadb616c41fdee32df780180ef6a2a873fa23ae34e5e88f63e46ee8d6da5de081acbc7a8639eb6c803d11027a63bb93dd139146a742673d670e38ef6244a1618c3fe12a212c988175ece5fe3eeabf1588a2e7979e00f20cece1d6ddcfe5065a23e37b5bc0262d5a73bd165f58f587f45bde7447a8d6d8f76ce7e9e5696d71a07450e5b0d018f08ae0796cd4a377fa230df6760cdb88d57903514cb300860620fd426050a1969e1f5a15432c11e7941d74395719b690d9346782ec5a5744f2a54773397c4463efc4d8e514c5608e6d18c46f9847e1b73673b23c270c37be452fbf979c67bdb1b2430708b907f48339e47c9153889cd755ed8dc0830d3e2e70af2095062764d22a4ba64b860e9dff8d4c7f1c979ea95756eb9bddf7b279b6023f5a0af31be5a95093079c77bdeabc79f6695cd960819e2a717ad89d416b998bd527702e5b98e25ec98173d434cb4efa7bed20302c31beb871aa8f97654012ff13bec49200215b8b117953777c70d294d139238de6cea55d18d79f7a8fb01715c19380041d03ba4e62256d8533d3ee8e8d47686ee0b7162e543f1afddfdcd02ea89ecc8181cd674d2272f37b72fc1c718aa1165250c350a951d85ddf436f7337eb77acf094ac7f1cc21d1daf1e841e458a5045cd687f1256b0f095868f6f0f14775d0fee41f3584d532a44737655aa9892db824ba186fa4d72b619c4eee50fd3c6859ada718de15e850603aa197b4193e693ed64f1241d6eedea413e7d02fac47438bb204d9606047a871704cc42dec1d8b73e0aa12eef1f23b16f691b411e8a0435f7ddef1fe7abd0445adac7862e74e6d4704879414918351e4a6b0bf44260f429a436f44c10a2e5682aa7a55be2bb720ee272c7e50aeaeff6e73c4e56ceb3167ef69e131fb911dd56e9a2f5f26cabf3d424c6ab5f6bf7b5705d5ce778744f1bcd28938f0c4f98a34124183cc99be6b64b85641f81bf733a0448d04b580276956e1c721377f1ab1d0eefbc3839f66793c9ebf4996a847788a90702198cf6beb9da35f69e80709d36295c6a29076933226ed31bc9c9c8d151a577f874fc5ccb96d53bd2ed372419a887fa45d6d6792d48ffddb390026616c608f35d015e6de6da59cd69a85413e146d2fe079f0c6f1389e3d1030204cd79b6b6af233b8b880d806f54a6c752e132272b6b775e9f7b030796897f7ac674d53890c76818f5f6dd957bdb97ac4c6b95bf81a458080a828ee011c142e04ba3fb3dc260dd215c5e22167c01fe5871369ef18b6da4260bcfc41c72575620b2492a8cb6f42a0e8e7d41d263037f5f8dbd3578284591283573f03d3bfd55c54ec4c14233d88a594ec9afa47bde86857a0dd1ed8d7cc5411eecd4afb9fb0340b9d40983bc897e6d504fb7fa14ce08f853b8e79cf52e3bd5081a8406224815adb4aec4dc51263b47fa3512d2efef54e93117ea434421eaf5906ee76dad288c953de176f205673db4490d64a4f5f0715f101e2834e3b811e220a3f736202635e9bbaac3d1dc588e76ae21e77099d212f65a5220a4fb2a2579e6241be802bbf52cc1a053e940f0595c6d734188a170fb0d5c25fadb3c3ae1e35a89dc7182e0ccbbc9ba587f00bf225b03cef7c69c310ed8e6501e8354c62d1fff1d36da5587a22c4890594f60f488e64596d4fa14504776085d1a6ee690bbb13c03631643ac7cc1a8a6f253c39350866a96681ae172f2a1d5f0a92a6dda7ee53b093bbd87eea56c9065fcc7d4caca1c10d20253a6570f22f9cab1606d5f7e71d9fb428c1fda7968634b6d58fa5216b3495736512eb5d822fd4c5205016a6205e3e0eb5d58530ed5a9a551ef8c156d42f7060355891f3b0387e9fe85e1c29f77abb1a12e90e989dce488a7d23be6d19dd9df5dd26c16c4b65959e1ec2e468295e0e2445543b49cdbbe2ba3c61bf49f22d5b1bbf123d5a92c51db48dbe386c62fd59bbc41655501fd7473eb03cf9a3c40504064363fec8920cfab002b7e085e2ecb1658db979f3313a56007d4337802b9a80c9da62efb4ef50e7bb885bad8532861489d6a8394cb0eeadd95aa364fa9b1a71a98dff1da58c92d3e6573f81b9c5a09f97779db23523d45d02e6c8a4afcda435e1fb8be854716a22e56873479f1d6ebd5ee74abfc78c16c24576754986d0def1bcea68f9e39072598c4969d8c7a4b263a95714e837a26e7be8f85de8bc3b1ce9285673bded989e27a92df6b52578b2eccb6bc518c5ff4d7916cbb0e602ff0c662acb5fc99e1dd94cc259d0176bbd9b85de57f1a82c479651e353313698e7dcaf2b43344989ecef2a96fe8e805e92f90bc1f6819b06be60ec8cd4e43213b0f3d3a40b131d7b5121c9ca7cebbe17c5de44877845d75d545cb937ddd840c7e0d50b287f1ada9968e65c60402ff59f1e8dec3f5a062232810956265f9751434c19ca3d13fdb7ea12733e5b9d1e51832043a848b1bc0be96228385bd66331a77a02800bf13abeafc398e63548233b86afbf87938754061b28fa7fc7eb77cbd5f366cc0cf03c5f272801e86923ef81049aa10523111520c60e2ae18ec872aed13e4e28e5476e440254f1791e9fc605c70ffba0a4f0d55e14b69efdf4167a9366e675e301f5c1460af59bf89f1d91a8dd209eb08efcb907601452902241fef172a0531eeae1435f3a4c2c6b824379d756f715eb6500c87536e47734498fcfd5548e0369312a88754b3f2d00c4daf10e398e6c1de68d09bbbb39a9ac36fe2b48d7f553c411ae39b212b2f9ead80ab2406a25ef09408cba64a8554ba098d20f69e7bc69a99b419760b507aecde3e487f3b440a5c58e43794dc7c159a1ee8896b225883449ebbcb0749de66cd84b03c6e924942b781dc57b3dffda29a953887fb35711208962066708f56c10b5f81398fd0e6c17f092a529790015d5eb431c98da2c1f1c5a93223ecabd58d20138ce4a3c6471dde5a082f99377e6b2045fd73475c37b45ddac30e939cf8ee98456776e09a0c5a3c4ca5cb598c221b7d16f14671889bc124b9ae7e6aca7e27deed99c1ac6963503fc660fd98af1a8b80553d"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD-openat$sequencer2-ioctl$SNDCTL_SEQ_RESET-ioctl$TIOCVHANGUP-socket$key-syz_init_net_socket$nfc_raw-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-connect$can_j1939-getpeername-accept-sendmsg$key-sendmsg$key-sendmsg$key-sendmsg$key-syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_control_io$rtl8150-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$sierra_net-syz_usb_control_io detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$uac1 detailed listing: executing program 0: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_usb_connect-mkdirat-mount$fuse-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-close_range-openat$kvm-mount-syz_usb_control_io$printer detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-setsockopt$inet_int-setsockopt$inet_int-sendto$inet-recvfrom$inet-syz_usb_connect$uac1-syz_usb_control_io-syz_usb_control_io$uac1-syz_usb_control_io-syz_usb_control_io detailed listing: executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 1m40s testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 4, 15, 9, 3, 16, 30, 15, 10, 10, 15, 22, 7, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_usb_disconnect(r0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0xf5e2, 0xffffffc4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x2, 0x4, 0x7, 0x7ff}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') executing program 3: syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f40100008c4ab532f541da41e3919ffe37976df838658f4a34f2a2ff6174dad2b5844397206060ceac50e3dc5e4c9b21a13fb0b0d24b937f079f23705152efc33643e73afc6e254be896fe3ab6c62f09cea431588166456a2fdde2c4a0d5141d4e8772f79169064652f1eeb76255acd341143565b0be18ca0d86dd60d3691d23d1849c0abe7d6800000000f23a75a7821fde4e75e8854849ac10b7c2d6958625477e862e22fe3dc3d03ed385ce3978af019f213feb32b673573e26c05eb7d589c09f86f56893f331ef1dbfc5d8779e", @ANYRES16=r4, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}]}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="09012dbd7000fcccdf253500000008000300", @ANYRES32=r5, @ANYBLOB="0a000600505050505050000014005500914de451964ca70c45eb22a10463b242"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r2, 0x6410) (async) sendfile(r0, r1, &(0x7f00000000c0)=0x401, 0x84) (async) sendfile(r1, r0, &(0x7f0000000100)=0x5e4c, 0xbf) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002180)={0x18, 0x0, r3, {0x1}}, 0x18) recvfrom$llc(r2, &(0x7f00000021c0)=""/16, 0x10, 0x20, &(0x7f0000002200)={0x1a, 0x17, 0x9, 0x4, 0x81, 0xf, @broadcast}, 0x10) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0xc1, 0x1, 0x1e}, 0x18) r5 = openat(r4, &(0x7f00000022c0)='./file0\x00', 0x102, 0x6b) mkdir(&(0x7f0000002300)='./file0\x00', 0x2) (async) fsync(r1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x0, 0x0) (async) rename(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000002440)={&(0x7f0000002400)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) fanotify_mark(r5, 0x200, 0x1, r6, &(0x7f0000002480)='./file0\x00') (async) linkat(r2, &(0x7f00000024c0)='./file0\x00', r5, &(0x7f0000002500)='./file0\x00', 0x400) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000002580)={0x6, 0x0, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) (async) setxattr$trusted_overlay_origin(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), &(0x7f0000002640), 0x2, 0x3) (async) r7 = syz_open_dev$dri(&(0x7f0000002680), 0x3ad, 0x4082) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f00000026c0)={0x0, 0xe37c, 0x1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002ac0)={r8, "061c8d45ccfa343c6552cd8b95091394"}) (async) lstat(&(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r9, &(0x7f0000003b80)="4f87820c0fef408a57ffba5936886fc66f8e91840ce32321f9a605e5f7bff39b847075f3711d49af4385d581b23ce99d0589b7e09b86d33888d32022649467c265c4fe6bbcd0a587bd1ebed95f1e7f7870b47fdcd7bd8682e7d28d19c0efa2079c1e8960efc0e0fc8149b3b5135620f870c0dfdeb34a553886de7d659b99acb7b67cf0143ad8beee26cfa79cc45c1adcc2d6daf2687f98501f69ed51a5", 0x9d, 0x4000000, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_connect(0x2, 0x19e, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x1f, 0x93, 0xa2, 0xff, 0x15c5, 0x8, 0xc581, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x1, 0xff, 0x7, 0x90, 0x9, [{{0x9, 0x4, 0x82, 0xe2, 0x7, 0x15, 0x8f, 0x50, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '#'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x7, 0xff}, {0x6, 0x24, 0x1a, 0xf00a, 0x2}, [@acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0xdefa}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9dc, 0x5, 0x53, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x9c, 0x7f, [0x7, 0xfff8, 0x0, 0x5, 0xd, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x2, 0xee1709e41bda8f25, 0xc0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xc9e}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xa, 0x4, 0x8, [@generic={0x62, 0x9, "7be58d70ee178fe1c99952a2afa7aecf763580222190165d9a011ad3894d92939836ca59e127ed8cc091a89f36f84f786360ed8629998cc299f15e14a911c71b391dacb2e135ae75e964ed1e96057ce99cdea124a4e9f071d71a3b5b3c2d960c"}, @generic={0x6a, 0x34, "24b4901f21e04055777a39d02f6c936ecca2dc3da6b545c8f133d758066c7a3e99361b53c88ae2c6d9906abd7984555e0afd29d3b2458f6bc9477575014d502775d58acb8f39a72c63d453b4cd4fe0d682ed5ef5b47f2968c253baebcc4b17a07c32f7c811164852"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x18, 0xfa, 0x5, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0xb, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x5000}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x3, 0x2806}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x2, 0x81, 0x5, 0xb7, 0x6}, 0xfe, &(0x7f0000000580)=ANY=[@ANYBLOB="050ffe0001f9100b1e3b946f4020bc51343a903a119e246dbfb61700578352e5a59ca4d1be01b056dcd4d559a8d7297deb12fbfaaaf8530e9676f85f9b88f9aac8695f3ceb24a25a3cb7be9d53795542d022abec3bbaf4b81f46ab49b49b9671d5b97ccbca01c16245f13a87412cbad5ca97156d0100000015df15461b1bb374c85cd2e098ecb2761139b8b8c377006c6ad5bc184424d35077b25fdeec454e1a8668841ca34b11455dce350fe97645f824dc1b16082f8303654ee1186ee8d5ffc62db220d0ce49bb5078429c4b7d606724c185a08de19df984e0b0fd608e14a6e08bd5b627291dcb43b279533bfc27588374227fee2b3fd9"], 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44b}}, {0x5f, &(0x7f0000000840)=@string={0x5f, 0x3, "ef89f4f9e63232729d1503a68689735ef977fea0e322345aa84422a2b6bbace8713cd96d781274dba61313ffd07ff6382635398d5512003f869e7ddb62b83d88d6fb869537193b5dea3ce49f5dbd177abcccb94976096e2dadfc36b802"}}, {0xee, &(0x7f00000008c0)=@string={0xee, 0x3, "5181cade3230306654dce416bbbf66daefe44ec152784b95ca99c58200ae58341b2ad1a287ee4f211b43f67667597e056ec7644e73a3c74043d9e547bd6e96375ffc9073fe694819b680a2d1b41b7de9f5d38033cc00b7bee4d33257ef98e048b1f5c280c348565b89d96709724cbf0f28cac360a73941c3682e46c80d144991456f72c2f78d5d2bee6a2249d53e1ac9f9a47e06094137190d96aac825caed5b393a80c44470d39b5717a024ee8487dea893df0e82b7acb6291a648da906010f074f2364fbc1ae1f1d5d7aa0ee8aaf6c16e2c8785f69fe421845a878157883febbef8ba1ca642ad9cd90cd43"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x813}}, {0x10, &(0x7f00000009c0)=@string={0x10, 0x3, "7fab25bf1a0f4cb44c07cae89a76"}}]}) r1 = syz_open_dev$usbmon(&(0x7f0000000800), 0x3, 0x8800) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="340200007d01000005f3000000000400000000000000040000000000000010000000000000000000000000050000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde0540000000faff7b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11200cfc2001000000000000000000000f313f6005700f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabbf20f9c1cbe36f4fd1a4cc280e8d489da649a37000e472c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000db06c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188513a5c0acaef86a9749b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/552, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x804000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xffffffff, [0x3, 0x3], 0xb4f6}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, &(0x7f0000000340)={0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x6) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000700)={0x5, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x3, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x3, '\x00', 0x9}, {0x5, 0x8, 0x0, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0xd}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x1, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x8, '\x00', 0x8}, {0x9, 0xe0, 0x12, '\x00', 0x1}, {0x5c, 0x8, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xed, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x42}]}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x5, 0x0, 0x42, @private1, @mcast1, 0x8, 0x8000, 0xfffffffd, 0xfffffff5}}) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000140)={0x8d, 0x29, 0x1, {0x8, [{{0x4, 0x1, 0x7}, 0x81, 0x7, 0xd, './file0/file0'}, {{0x10, 0x1, 0x7}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x4}, 0x9, 0x5, 0x7, './file0'}, {{0x0, 0x2}, 0x8, 0x5, 0x7, './file0'}]}}, 0x8d) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040345340000000000b4eae6c10b95f440361ae64e8be6a517325c48812b84fddc37be816ff6b0deccb61ebd4cf0"], 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000004780)={0x18, 0x0, 0x0, {0x6}}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001000)=@nullb, 0x0, &(0x7f0000002c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x89b1, &(0x7f00000000c0)={'bond0\x00', @ifru_settings={0xfffffefc, 0x454b, @fr=0x0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1e, 0x7f, 0x1, 0x0, 0x9, 0x1ed, 0x2, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000004c0)={0x0, 0x399aeff3d39f41f5, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x1b, "55b459477f48015bfe1f9bac7d36860831868671d98c5b580619f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="ea4e065fb8772cb56d2bfd1dbba32291ff7de2b3f814949463cf40a5979bcb7bd6bc0c5572be83458799127cdc4e3cb04b1509a2e92b8fa0e713821cc04436b818db4be54787d01253aa75da822a307c23caf70bca7c16d7d0a440028bfad32b9150066bc38760c12bef8ffc7d7a62bc881eefb25ccae6bd340adb936731b4b4e1d79ef4c61e7447ac89e4d42458886cdc1469b843c5dd1d2c3e97872f0a5c5e2c434fd647a6e077716c92b0827a2058e0e27db219389e9b0d326c13580692052deaa98442d757bb1096ff4544d49f8cdb926c220f8715f9d72b8d46edc07f9db757a1a4199cd3a142c2a8c695da03f8709371e98cf0df3fa7654edf7e90222ddf8029c676a4a2f0b7ad177f561cb9c0001b9939da97c2ab14aae9b2108157e402d1b0102c9bd785344164a45a81f62e54d3e0f96b4ca6482a4bdb055c5fbab7f37ed8908fa2a1792f21d22532c6abfb23ebe45bc204026361869acc85979999d33a2655d4d42112f57f9bca2f11eb37d967e40b327fff54eb28348d49546a3fb2b89f2dc3c70c701e0272591f774ac3c0e9809e7b1ff33b3c67ffac2923798adbacc6c333c4ebd687576b3a1f425df328d675b60b0c03e51d010b3119a07ea418faea0b83860d1a072958d7045166460f357aba9efc91e13eacbf79b345b349e09b055ce6eddc92dd1a64d988a9b6c8af35c9982b57b54363e405d44c5ebe8ebeb81adb97dbe11159a8c08ed39c463188caff998fad9f9995a73ec388c2bb6767c7cf4f721e409a8e3e8227455e32bd0b2fae4d33b9201c58b98bcb2e9ca87c2878e5fa4157db9381521bc88648866460a160b053a3f3c7eccadc411abdfa964a2a4a9dd3eeb96f8f5ea35570a8299817b5ee1e6a696985e136253265fb8cc2f3e5bd57cab6c587eefda510db8605b654bb5a89595368f384a11e329e5530629f0bcfc8264b3246e6b24181d65aa09d54d2b791404a9cbb7bc75af635f36eef432e41393e6cce2ed4adfd88ac7c5c06c307ad46d569434224e2bcc008b906471ead2941d812433e6b2280e3d23cb1905d49534922c40a09d074a193e3e408e20bff0c103e0bcf26b0f595874e6db79e703c6a34133676ee44c6bc189566a2731b324f4270e668b03095ec8397274e97fad4eaded6871817c51b856fe7c5fce914acd3c8e9065b63de008021a6319518109a6171ea209782f8cf329959a87665e58a67d655f693aa74034a325dd37efab1e4632534959ace1a7810b4d7c88c2b6ac8c61ab941ee9ec646da80b45c2ae195d4de28a371ffefd2c903026f963ef9342d4cea2bfbcc981456c651f84951544d836791cd28ae93cc807fc6196ff473d77b288c65625c913b16928a07212a4756273a74b93dc0ba57083a47dd16bb0ebf6235700ee1da6244963cdc38527cc6319f4ca561cc4e7fa56acfaa074bc68c3c230d870e0d9a92613cafc0d541d830b981b5181d41f0ed27bb27ae27cc11cf995a48edba21507d189d9dc16afcadb1a896eded3e02c8a75cef0ea0c84b702e330030d0cbb31af5322af50d189e8dac1fde45ff1f9e4abe47e4d4cd7f64c054d02b75f94dcb32f02bb85e06369fd9ff30e423f684f58f2851b3c7d2f4193be6c18133d644752f280c9c9f55130985975a1815f9d4d95d46585212081c5cd952597ace1f807e048041ee92894bf6fb9f9a95de9f8d1ec3b963f097e00ef2e09b7f98203a8087983df270d6ef6e42080b29c59992f5cfe73ec76049f88694e31e2c147f042b7ec5aeb7fd1916cee3cc10ca1aec8fc477d55e0363c9da3269b51bd1006772f094123431e7eca505a7e91b5ff4b44dd1aac91559bb33e5b444301b5ffbbbf384eb70c59a2544d32b83d3d4d746a11e57fe637560d55ea67a7144cb5ed2d7c600824033c9ddd3e0dd7adbcd7887495294d6bdeb69d3bdd9f2218199ab2bef840aeec4fab3dc6b233a370331913b5f892fc4ba77b6e8d1f46cd813f5317f2794ddeca5bfbd3e375ffa43b136baab600a5d5c8df544910b871b0ff299442ee0fe002f3d3c47d974b83ab275eaedbbecb8401701fd4f7487eb31c15ce029026c349620c937bdad23f5b48ded917fe2be55d01a55b3b60324adb7fb6e72d3efe052d3e36ead85a1e1fd54b07578f20b3c22762a6d9878bbff89ac0cdc013e1604188b9010e9b5cab4c12483bd039f3991359b9f28dfb5b0ae0515f91bc19687801aaf2e3b042bec463a07de8c87439970743145a5c8cdd56d21e9e79293370db7af003160a70c9db196f8f737756baa7738924f01e69e9988da2ca30618f1860e58602f681e271994931aca523a1b61440cc6fbdcecb6da8b93f04b069d8bd9291aaa8041d31454a93cf0198abc8b1e6d6696a69302aecbdf00aa6b72e436eb7c2cbd7851bf1f399f2425a8bc11778a2d009d4aed84201ba6f31dfb06461563b53a8473082db6ae7abe8a0bc08cc54df9f02a25491beb8480180ff073ae13b3b902caff42624f565937b63c93c98be8e9b52c312ac60097aafe5a2e03cef3c02bbda17aaaaf860a444a7fa8ab77961db692374e4973da4dabc3b4041e3c9cbf7311bc34dd1a4f8ca01d481d054487301976e9966d036575e4ccceeafdb99bc29e9bf2f6f45dc5e6eb3b04b5f85cad239c7b27d590640bd577e400ae130975d31d68cca48433ce8b3e8e8116be660ca5d3df022944c2da5aff48d74be6b136d755c8f736c07612faadb616c41fdee32df780180ef6a2a873fa23ae34e5e88f63e46ee8d6da5de081acbc7a8639eb6c803d11027a63bb93dd139146a742673d670e38ef6244a1618c3fe12a212c988175ece5fe3eeabf1588a2e7979e00f20cece1d6ddcfe5065a23e37b5bc0262d5a73bd165f58f587f45bde7447a8d6d8f76ce7e9e5696d71a07450e5b0d018f08ae0796cd4a377fa230df6760cdb88d57903514cb300860620fd426050a1969e1f5a15432c11e7941d74395719b690d9346782ec5a5744f2a54773397c4463efc4d8e514c5608e6d18c46f9847e1b73673b23c270c37be452fbf979c67bdb1b2430708b907f48339e47c9153889cd755ed8dc0830d3e2e70af2095062764d22a4ba64b860e9dff8d4c7f1c979ea95756eb9bddf7b279b6023f5a0af31be5a95093079c77bdeabc79f6695cd960819e2a717ad89d416b998bd527702e5b98e25ec98173d434cb4efa7bed20302c31beb871aa8f97654012ff13bec49200215b8b117953777c70d294d139238de6cea55d18d79f7a8fb01715c19380041d03ba4e62256d8533d3ee8e8d47686ee0b7162e543f1afddfdcd02ea89ecc8181cd674d2272f37b72fc1c718aa1165250c350a951d85ddf436f7337eb77acf094ac7f1cc21d1daf1e841e458a5045cd687f1256b0f095868f6f0f14775d0fee41f3584d532a44737655aa9892db824ba186fa4d72b619c4eee50fd3c6859ada718de15e850603aa197b4193e693ed64f1241d6eedea413e7d02fac47438bb204d9606047a871704cc42dec1d8b73e0aa12eef1f23b16f691b411e8a0435f7ddef1fe7abd0445adac7862e74e6d4704879414918351e4a6b0bf44260f429a436f44c10a2e5682aa7a55be2bb720ee272c7e50aeaeff6e73c4e56ceb3167ef69e131fb911dd56e9a2f5f26cabf3d424c6ab5f6bf7b5705d5ce778744f1bcd28938f0c4f98a34124183cc99be6b64b85641f81bf733a0448d04b580276956e1c721377f1ab1d0eefbc3839f66793c9ebf4996a847788a90702198cf6beb9da35f69e80709d36295c6a29076933226ed31bc9c9c8d151a577f874fc5ccb96d53bd2ed372419a887fa45d6d6792d48ffddb390026616c608f35d015e6de6da59cd69a85413e146d2fe079f0c6f1389e3d1030204cd79b6b6af233b8b880d806f54a6c752e132272b6b775e9f7b030796897f7ac674d53890c76818f5f6dd957bdb97ac4c6b95bf81a458080a828ee011c142e04ba3fb3dc260dd215c5e22167c01fe5871369ef18b6da4260bcfc41c72575620b2492a8cb6f42a0e8e7d41d263037f5f8dbd3578284591283573f03d3bfd55c54ec4c14233d88a594ec9afa47bde86857a0dd1ed8d7cc5411eecd4afb9fb0340b9d40983bc897e6d504fb7fa14ce08f853b8e79cf52e3bd5081a8406224815adb4aec4dc51263b47fa3512d2efef54e93117ea434421eaf5906ee76dad288c953de176f205673db4490d64a4f5f0715f101e2834e3b811e220a3f736202635e9bbaac3d1dc588e76ae21e77099d212f65a5220a4fb2a2579e6241be802bbf52cc1a053e940f0595c6d734188a170fb0d5c25fadb3c3ae1e35a89dc7182e0ccbbc9ba587f00bf225b03cef7c69c310ed8e6501e8354c62d1fff1d36da5587a22c4890594f60f488e64596d4fa14504776085d1a6ee690bbb13c03631643ac7cc1a8a6f253c39350866a96681ae172f2a1d5f0a92a6dda7ee53b093bbd87eea56c9065fcc7d4caca1c10d20253a6570f22f9cab1606d5f7e71d9fb428c1fda7968634b6d58fa5216b3495736512eb5d822fd4c5205016a6205e3e0eb5d58530ed5a9a551ef8c156d42f7060355891f3b0387e9fe85e1c29f77abb1a12e90e989dce488a7d23be6d19dd9df5dd26c16c4b65959e1ec2e468295e0e2445543b49cdbbe2ba3c61bf49f22d5b1bbf123d5a92c51db48dbe386c62fd59bbc41655501fd7473eb03cf9a3c40504064363fec8920cfab002b7e085e2ecb1658db979f3313a56007d4337802b9a80c9da62efb4ef50e7bb885bad8532861489d6a8394cb0eeadd95aa364fa9b1a71a98dff1da58c92d3e6573f81b9c5a09f97779db23523d45d02e6c8a4afcda435e1fb8be854716a22e56873479f1d6ebd5ee74abfc78c16c24576754986d0def1bcea68f9e39072598c4969d8c7a4b263a95714e837a26e7be8f85de8bc3b1ce9285673bded989e27a92df6b52578b2eccb6bc518c5ff4d7916cbb0e602ff0c662acb5fc99e1dd94cc259d0176bbd9b85de57f1a82c479651e353313698e7dcaf2b43344989ecef2a96fe8e805e92f90bc1f6819b06be60ec8cd4e43213b0f3d3a40b131d7b5121c9ca7cebbe17c5de44877845d75d545cb937ddd840c7e0d50b287f1ada9968e65c60402ff59f1e8dec3f5a062232810956265f9751434c19ca3d13fdb7ea12733e5b9d1e51832043a848b1bc0be96228385bd66331a77a02800bf13abeafc398e63548233b86afbf87938754061b28fa7fc7eb77cbd5f366cc0cf03c5f272801e86923ef81049aa10523111520c60e2ae18ec872aed13e4e28e5476e440254f1791e9fc605c70ffba0a4f0d55e14b69efdf4167a9366e675e301f5c1460af59bf89f1d91a8dd209eb08efcb907601452902241fef172a0531eeae1435f3a4c2c6b824379d756f715eb6500c87536e47734498fcfd5548e0369312a88754b3f2d00c4daf10e398e6c1de68d09bbbb39a9ac36fe2b48d7f553c411ae39b212b2f9ead80ab2406a25ef09408cba64a8554ba098d20f69e7bc69a99b419760b507aecde3e487f3b440a5c58e43794dc7c159a1ee8896b225883449ebbcb0749de66cd84b03c6e924942b781dc57b3dffda29a953887fb35711208962066708f56c10b5f81398fd0e6c17f092a529790015d5eb431c98da2c1f1c5a93223ecabd58d20138ce4a3c6471dde5a082f99377e6b2045fd73475c37b45ddac30e939cf8ee98456776e09a0c5a3c4ca5cb598c221b7d16f14671889bc124b9ae7e6aca7e27deed99c1ac6963503fc660fd98af1a8b80553d"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: bisecting 24 programs bisect: split chunks (needed=false): <24> bisect: split chunk #0 of len 24 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30, 15, 10, 10, 15, 22, 7, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 3: syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f40100008c4ab532f541da41e3919ffe37976df838658f4a34f2a2ff6174dad2b5844397206060ceac50e3dc5e4c9b21a13fb0b0d24b937f079f23705152efc33643e73afc6e254be896fe3ab6c62f09cea431588166456a2fdde2c4a0d5141d4e8772f79169064652f1eeb76255acd341143565b0be18ca0d86dd60d3691d23d1849c0abe7d6800000000f23a75a7821fde4e75e8854849ac10b7c2d6958625477e862e22fe3dc3d03ed385ce3978af019f213feb32b673573e26c05eb7d589c09f86f56893f331ef1dbfc5d8779e", @ANYRES16=r4, @ANYBLOB="00012dbd7000ffdbdf250a0000003800078008000200000000000c00040009000000000000000c00040007000000000000000c000300030000000000000008000100030000007800028008000200030000000400040008000200000000000800020003000000080001000700000008000100080000000400040044000380080002000c00000008000200fba80000080002003f23000008000100090000000800010000000100080001000900000008000200030000000800020000000000cc0004800900010073797a30000000004400078008000400070000000800010017000000080003000500000008000400c8f40000080002000800000008000300608400000800020080000000080001000e00000044000780080004000100000008000400040000000800020008000000080002000500000008000400b6ff0000080003007a84000008000100040000000800010019000000340007800800030007000000080002000300000008000200090000000800010007000000080001000100000008000400ff040000440002800c000380080002000008000024000380080002000300000008000200010000000800020005000000080001000002000008000100faffffff0800020009000000200005801c000280080002000900000008000100030000000800020003000000"], 0x1f4}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}]}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="09012dbd7000fcccdf253500000008000300", @ANYRES32=r5, @ANYBLOB="0a000600505050505050000014005500914de451964ca70c45eb22a10463b242"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000040)=0x1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$COMEDI_SETRSUBD(r2, 0x6410) (async) sendfile(r0, r1, &(0x7f00000000c0)=0x401, 0x84) (async) sendfile(r1, r0, &(0x7f0000000100)=0x5e4c, 0xbf) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000002180)={0x18, 0x0, r3, {0x1}}, 0x18) recvfrom$llc(r2, &(0x7f00000021c0)=""/16, 0x10, 0x20, &(0x7f0000002200)={0x1a, 0x17, 0x9, 0x4, 0x81, 0xf, @broadcast}, 0x10) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={0xc1, 0x1, 0x1e}, 0x18) r5 = openat(r4, &(0x7f00000022c0)='./file0\x00', 0x102, 0x6b) mkdir(&(0x7f0000002300)='./file0\x00', 0x2) (async) fsync(r1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder1\x00', 0x0, 0x0) (async) rename(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000002440)={&(0x7f0000002400)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) fanotify_mark(r5, 0x200, 0x1, r6, &(0x7f0000002480)='./file0\x00') (async) linkat(r2, &(0x7f00000024c0)='./file0\x00', r5, &(0x7f0000002500)='./file0\x00', 0x400) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000002580)={0x6, 0x0, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20) (async) setxattr$trusted_overlay_origin(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), &(0x7f0000002640), 0x2, 0x3) (async) r7 = syz_open_dev$dri(&(0x7f0000002680), 0x3ad, 0x4082) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f00000026c0)={0x0, 0xe37c, 0x1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002ac0)={r8, "061c8d45ccfa343c6552cd8b95091394"}) (async) lstat(&(0x7f0000003ac0)='./file0\x00', &(0x7f0000003b00)) (async) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r9, &(0x7f0000003b80)="4f87820c0fef408a57ffba5936886fc66f8e91840ce32321f9a605e5f7bff39b847075f3711d49af4385d581b23ce99d0589b7e09b86d33888d32022649467c265c4fe6bbcd0a587bd1ebed95f1e7f7870b47fdcd7bd8682e7d28d19c0efa2079c1e8960efc0e0fc8149b3b5135620f870c0dfdeb34a553886de7d659b99acb7b67cf0143ad8beee26cfa79cc45c1adcc2d6daf2687f98501f69ed51a5", 0x9d, 0x4000000, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000003c40)) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_connect(0x2, 0x19e, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x1f, 0x93, 0xa2, 0xff, 0x15c5, 0x8, 0xc581, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x1, 0xff, 0x7, 0x90, 0x9, [{{0x9, 0x4, 0x82, 0xe2, 0x7, 0x15, 0x8f, 0x50, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '#'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x7, 0xff}, {0x6, 0x24, 0x1a, 0xf00a, 0x2}, [@acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0xdefa}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9dc, 0x5, 0x53, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x9c, 0x7f, [0x7, 0xfff8, 0x0, 0x5, 0xd, 0x7]}]}], [{{0x9, 0x5, 0x2, 0x2, 0xee1709e41bda8f25, 0xc0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xc9e}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xa, 0x4, 0x8, [@generic={0x62, 0x9, "7be58d70ee178fe1c99952a2afa7aecf763580222190165d9a011ad3894d92939836ca59e127ed8cc091a89f36f84f786360ed8629998cc299f15e14a911c71b391dacb2e135ae75e964ed1e96057ce99cdea124a4e9f071d71a3b5b3c2d960c"}, @generic={0x6a, 0x34, "24b4901f21e04055777a39d02f6c936ecca2dc3da6b545c8f133d758066c7a3e99361b53c88ae2c6d9906abd7984555e0afd29d3b2458f6bc9477575014d502775d58acb8f39a72c63d453b4cd4fe0d682ed5ef5b47f2968c253baebcc4b17a07c32f7c811164852"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x18, 0xfa, 0x5, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0xb, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x5000}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x1, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x3, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x3, 0x2806}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x2, 0x81, 0x5, 0xb7, 0x6}, 0xfe, &(0x7f0000000580)=ANY=[@ANYBLOB="050ffe0001f9100b1e3b946f4020bc51343a903a119e246dbfb61700578352e5a59ca4d1be01b056dcd4d559a8d7297deb12fbfaaaf8530e9676f85f9b88f9aac8695f3ceb24a25a3cb7be9d53795542d022abec3bbaf4b81f46ab49b49b9671d5b97ccbca01c16245f13a87412cbad5ca97156d0100000015df15461b1bb374c85cd2e098ecb2761139b8b8c377006c6ad5bc184424d35077b25fdeec454e1a8668841ca34b11455dce350fe97645f824dc1b16082f8303654ee1186ee8d5ffc62db220d0ce49bb5078429c4b7d606724c185a08de19df984e0b0fd608e14a6e08bd5b627291dcb43b279533bfc27588374227fee2b3fd9"], 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44b}}, {0x5f, &(0x7f0000000840)=@string={0x5f, 0x3, "ef89f4f9e63232729d1503a68689735ef977fea0e322345aa84422a2b6bbace8713cd96d781274dba61313ffd07ff6382635398d5512003f869e7ddb62b83d88d6fb869537193b5dea3ce49f5dbd177abcccb94976096e2dadfc36b802"}}, {0xee, &(0x7f00000008c0)=@string={0xee, 0x3, "5181cade3230306654dce416bbbf66daefe44ec152784b95ca99c58200ae58341b2ad1a287ee4f211b43f67667597e056ec7644e73a3c74043d9e547bd6e96375ffc9073fe694819b680a2d1b41b7de9f5d38033cc00b7bee4d33257ef98e048b1f5c280c348565b89d96709724cbf0f28cac360a73941c3682e46c80d144991456f72c2f78d5d2bee6a2249d53e1ac9f9a47e06094137190d96aac825caed5b393a80c44470d39b5717a024ee8487dea893df0e82b7acb6291a648da906010f074f2364fbc1ae1f1d5d7aa0ee8aaf6c16e2c8785f69fe421845a878157883febbef8ba1ca642ad9cd90cd43"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x813}}, {0x10, &(0x7f00000009c0)=@string={0x10, 0x3, "7fab25bf1a0f4cb44c07cae89a76"}}]}) r1 = syz_open_dev$usbmon(&(0x7f0000000800), 0x3, 0x8800) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="340200007d01000005f3000000000400000000000000040000000000000010000000000000000000000000050000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde0540000000faff7b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11200cfc2001000000000000000000000f313f6005700f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabbf20f9c1cbe36f4fd1a4cc280e8d489da649a37000e472c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000db06c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188513a5c0acaef86a9749b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/552, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x804000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0xffffffff, [0x3, 0x3], 0xb4f6}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, &(0x7f0000000340)={0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x6) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000700)={0x5, 0x0, @ioapic={0x10000, 0x3, 0x1ff, 0x3, 0x0, [{0x6, 0x80, 0xfe}, {0xe7, 0x0, 0xfb}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xe, '\x00', 0xfa}, {0x0, 0x3, 0x3, '\x00', 0x9}, {0x5, 0x8, 0x0, '\x00', 0x1}, {0x16, 0x83, 0x6, '\x00', 0xcd}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0xd}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x0, 0x7, 0x5, '\x00', 0x75}, {0x8, 0x0, 0xb, '\x00', 0xf}, {0x2, 0x80, 0x1, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0xfa, 0x81, 0x8, '\x00', 0x8}, {0x9, 0xe0, 0x12, '\x00', 0x1}, {0x5c, 0x8, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0xa, '\x00', 0x6}, {0xd, 0x3, 0x2, '\x00', 0x4}, {0x6, 0x4, 0x80, '\x00', 0x80}, {0x7, 0x4, 0xed, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0xc9}, {0x7b, 0x7f, 0x7, '\x00', 0x42}]}}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x5, 0x0, 0x42, @private1, @mcast1, 0x8, 0x8000, 0xfffffffd, 0xfffffff5}}) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000140)={0x8d, 0x29, 0x1, {0x8, [{{0x4, 0x1, 0x7}, 0x81, 0x7, 0xd, './file0/file0'}, {{0x10, 0x1, 0x7}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x4}, 0x9, 0x5, 0x7, './file0'}, {{0x0, 0x2}, 0x8, 0x5, 0x7, './file0'}]}}, 0x8d) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00040345340000000000b4eae6c10b95f440361ae64e8be6a517325c48812b84fddc37be816ff6b0deccb61ebd4cf0"], 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000004780)={0x18, 0x0, 0x0, {0x6}}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001000)=@nullb, 0x0, &(0x7f0000002c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x89b1, &(0x7f00000000c0)={'bond0\x00', @ifru_settings={0xfffffefc, 0x454b, @fr=0x0}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1e, 0x7f, 0x1, 0x0, 0x9, 0x1ed, 0x2, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000004c0)={0x0, 0x399aeff3d39f41f5, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x1b, "55b459477f48015bfe1f9bac7d36860831868671d98c5b580619f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 4, 15, 9, 3, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_usb_disconnect(r0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0xf5e2, 0xffffffc4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x2, 0x4, 0x7, 0x7ff}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 4, 15, 9, 3] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_usb_disconnect(r0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0xf5e2, 0xffffffc4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x2, 0x4, 0x7, 0x7ff}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') program did not crash bisect: split chunks (needed=true): <8>, <8> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 15, 9, 3, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 1: r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_usb_disconnect(r0) executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0x5, 0xf5e2, 0xffffffc4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x2, 0x4, 0x7, 0x7ff}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a00100063fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="ea4e065fb8772cb56d2bfd1dbba32291ff7de2b3f814949463cf40a5979bcb7bd6bc0c5572be83458799127cdc4e3cb04b1509a2e92b8fa0e713821cc04436b818db4be54787d01253aa75da822a307c23caf70bca7c16d7d0a440028bfad32b9150066bc38760c12bef8ffc7d7a62bc881eefb25ccae6bd340adb936731b4b4e1d79ef4c61e7447ac89e4d42458886cdc1469b843c5dd1d2c3e97872f0a5c5e2c434fd647a6e077716c92b0827a2058e0e27db219389e9b0d326c13580692052deaa98442d757bb1096ff4544d49f8cdb926c220f8715f9d72b8d46edc07f9db757a1a4199cd3a142c2a8c695da03f8709371e98cf0df3fa7654edf7e90222ddf8029c676a4a2f0b7ad177f561cb9c0001b9939da97c2ab14aae9b2108157e402d1b0102c9bd785344164a45a81f62e54d3e0f96b4ca6482a4bdb055c5fbab7f37ed8908fa2a1792f21d22532c6abfb23ebe45bc204026361869acc85979999d33a2655d4d42112f57f9bca2f11eb37d967e40b327fff54eb28348d49546a3fb2b89f2dc3c70c701e0272591f774ac3c0e9809e7b1ff33b3c67ffac2923798adbacc6c333c4ebd687576b3a1f425df328d675b60b0c03e51d010b3119a07ea418faea0b83860d1a072958d7045166460f357aba9efc91e13eacbf79b345b349e09b055ce6eddc92dd1a64d988a9b6c8af35c9982b57b54363e405d44c5ebe8ebeb81adb97dbe11159a8c08ed39c463188caff998fad9f9995a73ec388c2bb6767c7cf4f721e409a8e3e8227455e32bd0b2fae4d33b9201c58b98bcb2e9ca87c2878e5fa4157db9381521bc88648866460a160b053a3f3c7eccadc411abdfa964a2a4a9dd3eeb96f8f5ea35570a8299817b5ee1e6a696985e136253265fb8cc2f3e5bd57cab6c587eefda510db8605b654bb5a89595368f384a11e329e5530629f0bcfc8264b3246e6b24181d65aa09d54d2b791404a9cbb7bc75af635f36eef432e41393e6cce2ed4adfd88ac7c5c06c307ad46d569434224e2bcc008b906471ead2941d812433e6b2280e3d23cb1905d49534922c40a09d074a193e3e408e20bff0c103e0bcf26b0f595874e6db79e703c6a34133676ee44c6bc189566a2731b324f4270e668b03095ec8397274e97fad4eaded6871817c51b856fe7c5fce914acd3c8e9065b63de008021a6319518109a6171ea209782f8cf329959a87665e58a67d655f693aa74034a325dd37efab1e4632534959ace1a7810b4d7c88c2b6ac8c61ab941ee9ec646da80b45c2ae195d4de28a371ffefd2c903026f963ef9342d4cea2bfbcc981456c651f84951544d836791cd28ae93cc807fc6196ff473d77b288c65625c913b16928a07212a4756273a74b93dc0ba57083a47dd16bb0ebf6235700ee1da6244963cdc38527cc6319f4ca561cc4e7fa56acfaa074bc68c3c230d870e0d9a92613cafc0d541d830b981b5181d41f0ed27bb27ae27cc11cf995a48edba21507d189d9dc16afcadb1a896eded3e02c8a75cef0ea0c84b702e330030d0cbb31af5322af50d189e8dac1fde45ff1f9e4abe47e4d4cd7f64c054d02b75f94dcb32f02bb85e06369fd9ff30e423f684f58f2851b3c7d2f4193be6c18133d644752f280c9c9f55130985975a1815f9d4d95d46585212081c5cd952597ace1f807e048041ee92894bf6fb9f9a95de9f8d1ec3b963f097e00ef2e09b7f98203a8087983df270d6ef6e42080b29c59992f5cfe73ec76049f88694e31e2c147f042b7ec5aeb7fd1916cee3cc10ca1aec8fc477d55e0363c9da3269b51bd1006772f094123431e7eca505a7e91b5ff4b44dd1aac91559bb33e5b444301b5ffbbbf384eb70c59a2544d32b83d3d4d746a11e57fe637560d55ea67a7144cb5ed2d7c600824033c9ddd3e0dd7adbcd7887495294d6bdeb69d3bdd9f2218199ab2bef840aeec4fab3dc6b233a370331913b5f892fc4ba77b6e8d1f46cd813f5317f2794ddeca5bfbd3e375ffa43b136baab600a5d5c8df544910b871b0ff299442ee0fe002f3d3c47d974b83ab275eaedbbecb8401701fd4f7487eb31c15ce029026c349620c937bdad23f5b48ded917fe2be55d01a55b3b60324adb7fb6e72d3efe052d3e36ead85a1e1fd54b07578f20b3c22762a6d9878bbff89ac0cdc013e1604188b9010e9b5cab4c12483bd039f3991359b9f28dfb5b0ae0515f91bc19687801aaf2e3b042bec463a07de8c87439970743145a5c8cdd56d21e9e79293370db7af003160a70c9db196f8f737756baa7738924f01e69e9988da2ca30618f1860e58602f681e271994931aca523a1b61440cc6fbdcecb6da8b93f04b069d8bd9291aaa8041d31454a93cf0198abc8b1e6d6696a69302aecbdf00aa6b72e436eb7c2cbd7851bf1f399f2425a8bc11778a2d009d4aed84201ba6f31dfb06461563b53a8473082db6ae7abe8a0bc08cc54df9f02a25491beb8480180ff073ae13b3b902caff42624f565937b63c93c98be8e9b52c312ac60097aafe5a2e03cef3c02bbda17aaaaf860a444a7fa8ab77961db692374e4973da4dabc3b4041e3c9cbf7311bc34dd1a4f8ca01d481d054487301976e9966d036575e4ccceeafdb99bc29e9bf2f6f45dc5e6eb3b04b5f85cad239c7b27d590640bd577e400ae130975d31d68cca48433ce8b3e8e8116be660ca5d3df022944c2da5aff48d74be6b136d755c8f736c07612faadb616c41fdee32df780180ef6a2a873fa23ae34e5e88f63e46ee8d6da5de081acbc7a8639eb6c803d11027a63bb93dd139146a742673d670e38ef6244a1618c3fe12a212c988175ece5fe3eeabf1588a2e7979e00f20cece1d6ddcfe5065a23e37b5bc0262d5a73bd165f58f587f45bde7447a8d6d8f76ce7e9e5696d71a07450e5b0d018f08ae0796cd4a377fa230df6760cdb88d57903514cb300860620fd426050a1969e1f5a15432c11e7941d74395719b690d9346782ec5a5744f2a54773397c4463efc4d8e514c5608e6d18c46f9847e1b73673b23c270c37be452fbf979c67bdb1b2430708b907f48339e47c9153889cd755ed8dc0830d3e2e70af2095062764d22a4ba64b860e9dff8d4c7f1c979ea95756eb9bddf7b279b6023f5a0af31be5a95093079c77bdeabc79f6695cd960819e2a717ad89d416b998bd527702e5b98e25ec98173d434cb4efa7bed20302c31beb871aa8f97654012ff13bec49200215b8b117953777c70d294d139238de6cea55d18d79f7a8fb01715c19380041d03ba4e62256d8533d3ee8e8d47686ee0b7162e543f1afddfdcd02ea89ecc8181cd674d2272f37b72fc1c718aa1165250c350a951d85ddf436f7337eb77acf094ac7f1cc21d1daf1e841e458a5045cd687f1256b0f095868f6f0f14775d0fee41f3584d532a44737655aa9892db824ba186fa4d72b619c4eee50fd3c6859ada718de15e850603aa197b4193e693ed64f1241d6eedea413e7d02fac47438bb204d9606047a871704cc42dec1d8b73e0aa12eef1f23b16f691b411e8a0435f7ddef1fe7abd0445adac7862e74e6d4704879414918351e4a6b0bf44260f429a436f44c10a2e5682aa7a55be2bb720ee272c7e50aeaeff6e73c4e56ceb3167ef69e131fb911dd56e9a2f5f26cabf3d424c6ab5f6bf7b5705d5ce778744f1bcd28938f0c4f98a34124183cc99be6b64b85641f81bf733a0448d04b580276956e1c721377f1ab1d0eefbc3839f66793c9ebf4996a847788a90702198cf6beb9da35f69e80709d36295c6a29076933226ed31bc9c9c8d151a577f874fc5ccb96d53bd2ed372419a887fa45d6d6792d48ffddb390026616c608f35d015e6de6da59cd69a85413e146d2fe079f0c6f1389e3d1030204cd79b6b6af233b8b880d806f54a6c752e132272b6b775e9f7b030796897f7ac674d53890c76818f5f6dd957bdb97ac4c6b95bf81a458080a828ee011c142e04ba3fb3dc260dd215c5e22167c01fe5871369ef18b6da4260bcfc41c72575620b2492a8cb6f42a0e8e7d41d263037f5f8dbd3578284591283573f03d3bfd55c54ec4c14233d88a594ec9afa47bde86857a0dd1ed8d7cc5411eecd4afb9fb0340b9d40983bc897e6d504fb7fa14ce08f853b8e79cf52e3bd5081a8406224815adb4aec4dc51263b47fa3512d2efef54e93117ea434421eaf5906ee76dad288c953de176f205673db4490d64a4f5f0715f101e2834e3b811e220a3f736202635e9bbaac3d1dc588e76ae21e77099d212f65a5220a4fb2a2579e6241be802bbf52cc1a053e940f0595c6d734188a170fb0d5c25fadb3c3ae1e35a89dc7182e0ccbbc9ba587f00bf225b03cef7c69c310ed8e6501e8354c62d1fff1d36da5587a22c4890594f60f488e64596d4fa14504776085d1a6ee690bbb13c03631643ac7cc1a8a6f253c39350866a96681ae172f2a1d5f0a92a6dda7ee53b093bbd87eea56c9065fcc7d4caca1c10d20253a6570f22f9cab1606d5f7e71d9fb428c1fda7968634b6d58fa5216b3495736512eb5d822fd4c5205016a6205e3e0eb5d58530ed5a9a551ef8c156d42f7060355891f3b0387e9fe85e1c29f77abb1a12e90e989dce488a7d23be6d19dd9df5dd26c16c4b65959e1ec2e468295e0e2445543b49cdbbe2ba3c61bf49f22d5b1bbf123d5a92c51db48dbe386c62fd59bbc41655501fd7473eb03cf9a3c40504064363fec8920cfab002b7e085e2ecb1658db979f3313a56007d4337802b9a80c9da62efb4ef50e7bb885bad8532861489d6a8394cb0eeadd95aa364fa9b1a71a98dff1da58c92d3e6573f81b9c5a09f97779db23523d45d02e6c8a4afcda435e1fb8be854716a22e56873479f1d6ebd5ee74abfc78c16c24576754986d0def1bcea68f9e39072598c4969d8c7a4b263a95714e837a26e7be8f85de8bc3b1ce9285673bded989e27a92df6b52578b2eccb6bc518c5ff4d7916cbb0e602ff0c662acb5fc99e1dd94cc259d0176bbd9b85de57f1a82c479651e353313698e7dcaf2b43344989ecef2a96fe8e805e92f90bc1f6819b06be60ec8cd4e43213b0f3d3a40b131d7b5121c9ca7cebbe17c5de44877845d75d545cb937ddd840c7e0d50b287f1ada9968e65c60402ff59f1e8dec3f5a062232810956265f9751434c19ca3d13fdb7ea12733e5b9d1e51832043a848b1bc0be96228385bd66331a77a02800bf13abeafc398e63548233b86afbf87938754061b28fa7fc7eb77cbd5f366cc0cf03c5f272801e86923ef81049aa10523111520c60e2ae18ec872aed13e4e28e5476e440254f1791e9fc605c70ffba0a4f0d55e14b69efdf4167a9366e675e301f5c1460af59bf89f1d91a8dd209eb08efcb907601452902241fef172a0531eeae1435f3a4c2c6b824379d756f715eb6500c87536e47734498fcfd5548e0369312a88754b3f2d00c4daf10e398e6c1de68d09bbbb39a9ac36fe2b48d7f553c411ae39b212b2f9ead80ab2406a25ef09408cba64a8554ba098d20f69e7bc69a99b419760b507aecde3e487f3b440a5c58e43794dc7c159a1ee8896b225883449ebbcb0749de66cd84b03c6e924942b781dc57b3dffda29a953887fb35711208962066708f56c10b5f81398fd0e6c17f092a529790015d5eb431c98da2c1f1c5a93223ecabd58d20138ce4a3c6471dde5a082f99377e6b2045fd73475c37b45ddac30e939cf8ee98456776e09a0c5a3c4ca5cb598c221b7d16f14671889bc124b9ae7e6aca7e27deed99c1ac6963503fc660fd98af1a8b80553d"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 6, 10, 10, 21, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x800003}) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) executing program 0: r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) iopl(0x3) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) (async) iopl(0x3) (async) syz_clone3(&(0x7f0000000280)={0x100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)="51faf35b37cade16b70325c9c82c106a03113678259b7bdf02326b78ec769d964512b55fa12eea2e4b8904716720609d67e603a80fd54212961bb1025714cb77", 0x40}, 0x68) (async) executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7fffffff, 0x73e7, 0x8}, 0x10) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) r4 = dup(r1) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: split chunk #1 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 5, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4>, <4> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 5, 12, 1, 30, 30] detailed listing: executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0xd, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x40, 0x4}, {0xdddd0000, 0x10000, 0x4, 0x0, 0xff, 0x4, 0xa, 0xe, 0x0, 0x3c}, {0x8080000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x81, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) io_setup(0x3ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x35, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16], 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x2, 0x20, 0x403, 0x7, 0x106c, 0x80003ffd, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x2000, 0x8001], 0x10000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_clone(0x2311480, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone3(&(0x7f00000009c0)={0xc202a600, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000005c0), {0x15}, &(0x7f0000000840)=""/173, 0xad, &(0x7f0000000900)=""/79, &(0x7f0000000980)=[r6, r6], 0x2}, 0x58) r8 = syz_open_procfs(r7, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2], [0xfff]], '\x00', [{0x0, 0x1, 0x1}, {}, {}, {}, {0xfffffffd}]}) syz_usb_disconnect(0xffffffffffffffff) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000280)={'\x00', 0xeb, 0x5908, 0x4000b, 0x4, 0x2000000001, r6}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/net\x00') executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="ea4e065fb8772cb56d2bfd1dbba32291ff7de2b3f814949463cf40a5979bcb7bd6bc0c5572be83458799127cdc4e3cb04b1509a2e92b8fa0e713821cc04436b818db4be54787d01253aa75da822a307c23caf70bca7c16d7d0a440028bfad32b9150066bc38760c12bef8ffc7d7a62bc881eefb25ccae6bd340adb936731b4b4e1d79ef4c61e7447ac89e4d42458886cdc1469b843c5dd1d2c3e97872f0a5c5e2c434fd647a6e077716c92b0827a2058e0e27db219389e9b0d326c13580692052deaa98442d757bb1096ff4544d49f8cdb926c220f8715f9d72b8d46edc07f9db757a1a4199cd3a142c2a8c695da03f8709371e98cf0df3fa7654edf7e90222ddf8029c676a4a2f0b7ad177f561cb9c0001b9939da97c2ab14aae9b2108157e402d1b0102c9bd785344164a45a81f62e54d3e0f96b4ca6482a4bdb055c5fbab7f37ed8908fa2a1792f21d22532c6abfb23ebe45bc204026361869acc85979999d33a2655d4d42112f57f9bca2f11eb37d967e40b327fff54eb28348d49546a3fb2b89f2dc3c70c701e0272591f774ac3c0e9809e7b1ff33b3c67ffac2923798adbacc6c333c4ebd687576b3a1f425df328d675b60b0c03e51d010b3119a07ea418faea0b83860d1a072958d7045166460f357aba9efc91e13eacbf79b345b349e09b055ce6eddc92dd1a64d988a9b6c8af35c9982b57b54363e405d44c5ebe8ebeb81adb97dbe11159a8c08ed39c463188caff998fad9f9995a73ec388c2bb6767c7cf4f721e409a8e3e8227455e32bd0b2fae4d33b9201c58b98bcb2e9ca87c2878e5fa4157db9381521bc88648866460a160b053a3f3c7eccadc411abdfa964a2a4a9dd3eeb96f8f5ea35570a8299817b5ee1e6a696985e136253265fb8cc2f3e5bd57cab6c587eefda510db8605b654bb5a89595368f384a11e329e5530629f0bcfc8264b3246e6b24181d65aa09d54d2b791404a9cbb7bc75af635f36eef432e41393e6cce2ed4adfd88ac7c5c06c307ad46d569434224e2bcc008b906471ead2941d812433e6b2280e3d23cb1905d49534922c40a09d074a193e3e408e20bff0c103e0bcf26b0f595874e6db79e703c6a34133676ee44c6bc189566a2731b324f4270e668b03095ec8397274e97fad4eaded6871817c51b856fe7c5fce914acd3c8e9065b63de008021a6319518109a6171ea209782f8cf329959a87665e58a67d655f693aa74034a325dd37efab1e4632534959ace1a7810b4d7c88c2b6ac8c61ab941ee9ec646da80b45c2ae195d4de28a371ffefd2c903026f963ef9342d4cea2bfbcc981456c651f84951544d836791cd28ae93cc807fc6196ff473d77b288c65625c913b16928a07212a4756273a74b93dc0ba57083a47dd16bb0ebf6235700ee1da6244963cdc38527cc6319f4ca561cc4e7fa56acfaa074bc68c3c230d870e0d9a92613cafc0d541d830b981b5181d41f0ed27bb27ae27cc11cf995a48edba21507d189d9dc16afcadb1a896eded3e02c8a75cef0ea0c84b702e330030d0cbb31af5322af50d189e8dac1fde45ff1f9e4abe47e4d4cd7f64c054d02b75f94dcb32f02bb85e06369fd9ff30e423f684f58f2851b3c7d2f4193be6c18133d644752f280c9c9f55130985975a1815f9d4d95d46585212081c5cd952597ace1f807e048041ee92894bf6fb9f9a95de9f8d1ec3b963f097e00ef2e09b7f98203a8087983df270d6ef6e42080b29c59992f5cfe73ec76049f88694e31e2c147f042b7ec5aeb7fd1916cee3cc10ca1aec8fc477d55e0363c9da3269b51bd1006772f094123431e7eca505a7e91b5ff4b44dd1aac91559bb33e5b444301b5ffbbbf384eb70c59a2544d32b83d3d4d746a11e57fe637560d55ea67a7144cb5ed2d7c600824033c9ddd3e0dd7adbcd7887495294d6bdeb69d3bdd9f2218199ab2bef840aeec4fab3dc6b233a370331913b5f892fc4ba77b6e8d1f46cd813f5317f2794ddeca5bfbd3e375ffa43b136baab600a5d5c8df544910b871b0ff299442ee0fe002f3d3c47d974b83ab275eaedbbecb8401701fd4f7487eb31c15ce029026c349620c937bdad23f5b48ded917fe2be55d01a55b3b60324adb7fb6e72d3efe052d3e36ead85a1e1fd54b07578f20b3c22762a6d9878bbff89ac0cdc013e1604188b9010e9b5cab4c12483bd039f3991359b9f28dfb5b0ae0515f91bc19687801aaf2e3b042bec463a07de8c87439970743145a5c8cdd56d21e9e79293370db7af003160a70c9db196f8f737756baa7738924f01e69e9988da2ca30618f1860e58602f681e271994931aca523a1b61440cc6fbdcecb6da8b93f04b069d8bd9291aaa8041d31454a93cf0198abc8b1e6d6696a69302aecbdf00aa6b72e436eb7c2cbd7851bf1f399f2425a8bc11778a2d009d4aed84201ba6f31dfb06461563b53a8473082db6ae7abe8a0bc08cc54df9f02a25491beb8480180ff073ae13b3b902caff42624f565937b63c93c98be8e9b52c312ac60097aafe5a2e03cef3c02bbda17aaaaf860a444a7fa8ab77961db692374e4973da4dabc3b4041e3c9cbf7311bc34dd1a4f8ca01d481d054487301976e9966d036575e4ccceeafdb99bc29e9bf2f6f45dc5e6eb3b04b5f85cad239c7b27d590640bd577e400ae130975d31d68cca48433ce8b3e8e8116be660ca5d3df022944c2da5aff48d74be6b136d755c8f736c07612faadb616c41fdee32df780180ef6a2a873fa23ae34e5e88f63e46ee8d6da5de081acbc7a8639eb6c803d11027a63bb93dd139146a742673d670e38ef6244a1618c3fe12a212c988175ece5fe3eeabf1588a2e7979e00f20cece1d6ddcfe5065a23e37b5bc0262d5a73bd165f58f587f45bde7447a8d6d8f76ce7e9e5696d71a07450e5b0d018f08ae0796cd4a377fa230df6760cdb88d57903514cb300860620fd426050a1969e1f5a15432c11e7941d74395719b690d9346782ec5a5744f2a54773397c4463efc4d8e514c5608e6d18c46f9847e1b73673b23c270c37be452fbf979c67bdb1b2430708b907f48339e47c9153889cd755ed8dc0830d3e2e70af2095062764d22a4ba64b860e9dff8d4c7f1c979ea95756eb9bddf7b279b6023f5a0af31be5a95093079c77bdeabc79f6695cd960819e2a717ad89d416b998bd527702e5b98e25ec98173d434cb4efa7bed20302c31beb871aa8f97654012ff13bec49200215b8b117953777c70d294d139238de6cea55d18d79f7a8fb01715c19380041d03ba4e62256d8533d3ee8e8d47686ee0b7162e543f1afddfdcd02ea89ecc8181cd674d2272f37b72fc1c718aa1165250c350a951d85ddf436f7337eb77acf094ac7f1cc21d1daf1e841e458a5045cd687f1256b0f095868f6f0f14775d0fee41f3584d532a44737655aa9892db824ba186fa4d72b619c4eee50fd3c6859ada718de15e850603aa197b4193e693ed64f1241d6eedea413e7d02fac47438bb204d9606047a871704cc42dec1d8b73e0aa12eef1f23b16f691b411e8a0435f7ddef1fe7abd0445adac7862e74e6d4704879414918351e4a6b0bf44260f429a436f44c10a2e5682aa7a55be2bb720ee272c7e50aeaeff6e73c4e56ceb3167ef69e131fb911dd56e9a2f5f26cabf3d424c6ab5f6bf7b5705d5ce778744f1bcd28938f0c4f98a34124183cc99be6b64b85641f81bf733a0448d04b580276956e1c721377f1ab1d0eefbc3839f66793c9ebf4996a847788a90702198cf6beb9da35f69e80709d36295c6a29076933226ed31bc9c9c8d151a577f874fc5ccb96d53bd2ed372419a887fa45d6d6792d48ffddb390026616c608f35d015e6de6da59cd69a85413e146d2fe079f0c6f1389e3d1030204cd79b6b6af233b8b880d806f54a6c752e132272b6b775e9f7b030796897f7ac674d53890c76818f5f6dd957bdb97ac4c6b95bf81a458080a828ee011c142e04ba3fb3dc260dd215c5e22167c01fe5871369ef18b6da4260bcfc41c72575620b2492a8cb6f42a0e8e7d41d263037f5f8dbd3578284591283573f03d3bfd55c54ec4c14233d88a594ec9afa47bde86857a0dd1ed8d7cc5411eecd4afb9fb0340b9d40983bc897e6d504fb7fa14ce08f853b8e79cf52e3bd5081a8406224815adb4aec4dc51263b47fa3512d2efef54e93117ea434421eaf5906ee76dad288c953de176f205673db4490d64a4f5f0715f101e2834e3b811e220a3f736202635e9bbaac3d1dc588e76ae21e77099d212f65a5220a4fb2a2579e6241be802bbf52cc1a053e940f0595c6d734188a170fb0d5c25fadb3c3ae1e35a89dc7182e0ccbbc9ba587f00bf225b03cef7c69c310ed8e6501e8354c62d1fff1d36da5587a22c4890594f60f488e64596d4fa14504776085d1a6ee690bbb13c03631643ac7cc1a8a6f253c39350866a96681ae172f2a1d5f0a92a6dda7ee53b093bbd87eea56c9065fcc7d4caca1c10d20253a6570f22f9cab1606d5f7e71d9fb428c1fda7968634b6d58fa5216b3495736512eb5d822fd4c5205016a6205e3e0eb5d58530ed5a9a551ef8c156d42f7060355891f3b0387e9fe85e1c29f77abb1a12e90e989dce488a7d23be6d19dd9df5dd26c16c4b65959e1ec2e468295e0e2445543b49cdbbe2ba3c61bf49f22d5b1bbf123d5a92c51db48dbe386c62fd59bbc41655501fd7473eb03cf9a3c40504064363fec8920cfab002b7e085e2ecb1658db979f3313a56007d4337802b9a80c9da62efb4ef50e7bb885bad8532861489d6a8394cb0eeadd95aa364fa9b1a71a98dff1da58c92d3e6573f81b9c5a09f97779db23523d45d02e6c8a4afcda435e1fb8be854716a22e56873479f1d6ebd5ee74abfc78c16c24576754986d0def1bcea68f9e39072598c4969d8c7a4b263a95714e837a26e7be8f85de8bc3b1ce9285673bded989e27a92df6b52578b2eccb6bc518c5ff4d7916cbb0e602ff0c662acb5fc99e1dd94cc259d0176bbd9b85de57f1a82c479651e353313698e7dcaf2b43344989ecef2a96fe8e805e92f90bc1f6819b06be60ec8cd4e43213b0f3d3a40b131d7b5121c9ca7cebbe17c5de44877845d75d545cb937ddd840c7e0d50b287f1ada9968e65c60402ff59f1e8dec3f5a062232810956265f9751434c19ca3d13fdb7ea12733e5b9d1e51832043a848b1bc0be96228385bd66331a77a02800bf13abeafc398e63548233b86afbf87938754061b28fa7fc7eb77cbd5f366cc0cf03c5f272801e86923ef81049aa10523111520c60e2ae18ec872aed13e4e28e5476e440254f1791e9fc605c70ffba0a4f0d55e14b69efdf4167a9366e675e301f5c1460af59bf89f1d91a8dd209eb08efcb907601452902241fef172a0531eeae1435f3a4c2c6b824379d756f715eb6500c87536e47734498fcfd5548e0369312a88754b3f2d00c4daf10e398e6c1de68d09bbbb39a9ac36fe2b48d7f553c411ae39b212b2f9ead80ab2406a25ef09408cba64a8554ba098d20f69e7bc69a99b419760b507aecde3e487f3b440a5c58e43794dc7c159a1ee8896b225883449ebbcb0749de66cd84b03c6e924942b781dc57b3dffda29a953887fb35711208962066708f56c10b5f81398fd0e6c17f092a529790015d5eb431c98da2c1f1c5a93223ecabd58d20138ce4a3c6471dde5a082f99377e6b2045fd73475c37b45ddac30e939cf8ee98456776e09a0c5a3c4ca5cb598c221b7d16f14671889bc124b9ae7e6aca7e27deed99c1ac6963503fc660fd98af1a8b80553d"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 12, 1, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000180)={0x0, 0xf, 0x9, "05382d5cb185467582"}, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x100, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x1, 0xd7, 0xb, 0x8, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x6, "a4", ']'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0xdd, 0x28, "e882a40a26"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x4, 0x5, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0xf8, {0x7, 0x25, 0x1, 0x1, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8009, 0xff}, @as_header={0x7, 0x24, 0x1, 0x81, 0xa0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x10, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa6}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30, 30, 30] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="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"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2>, <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040801}, 0x4) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000240)=0x1) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x48880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = signalfd(r1, &(0x7f0000000500)={[0x2]}, 0x8) write$P9_RVERSION(r4, &(0x7f0000000540)={0x13, 0x65, 0xffff, 0x1ff, 0x6, '9P2000'}, 0x13) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000580)) write$P9_RREMOVE(r4, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42d3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x81) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) getpid() openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x80480, 0x60, 0x9}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffe98}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x800, 0xffb, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000c80)={0x1164, 0xe, 0x8, 0x5, 0x70bd2b, 0x25dfdbfb, {0x8, 0x0, 0xa}, [@nested={0x52, 0x9b, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @generic="7bdf4b7f5e3dbdb4f2c5b4c170d1332d79a2c2f0a0de9563b4ea5b62d9fc23ed15d9e8c5e4c341f3e0826b7b4332c387edb8", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="165b5ec90aa5fb1daef6892d85f063add59305c7bb78f429fd44fd4dd7f0dcf62f803e116b418a61cd677e8c10180e0b07a8008659d5c7f5ba75c755fe21016fcfb25a7b8125f9692b2da398135396c9aa326635c55c", @generic="9e9f691d0383bf1a088dd06dd57c6c1c256af0f95fb40907901019b9ba8a839c28796e00deaa54c073efc3dd557de342384c41bcf548127e72f7863e1870c1a1422b85c8e38bc6478769ae4ff13219015a40f31eb60f5aea7f6fc836faf6a5f091ab086c9faea7c6b3b53943a8d7e22ad73d924eb065262cdd9c238c8545d3844a678a412686fa23121947ec8fec3828", @nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="ea4e065fb8772cb56d2bfd1dbba32291ff7de2b3f814949463cf40a5979bcb7bd6bc0c5572be83458799127cdc4e3cb04b1509a2e92b8fa0e713821cc04436b818db4be54787d01253aa75da822a307c23caf70bca7c16d7d0a440028bfad32b9150066bc38760c12bef8ffc7d7a62bc881eefb25ccae6bd340adb936731b4b4e1d79ef4c61e7447ac89e4d42458886cdc1469b843c5dd1d2c3e97872f0a5c5e2c434fd647a6e077716c92b0827a2058e0e27db219389e9b0d326c13580692052deaa98442d757bb1096ff4544d49f8cdb926c220f8715f9d72b8d46edc07f9db757a1a4199cd3a142c2a8c695da03f8709371e98cf0df3fa7654edf7e90222ddf8029c676a4a2f0b7ad177f561cb9c0001b9939da97c2ab14aae9b2108157e402d1b0102c9bd785344164a45a81f62e54d3e0f96b4ca6482a4bdb055c5fbab7f37ed8908fa2a1792f21d22532c6abfb23ebe45bc204026361869acc85979999d33a2655d4d42112f57f9bca2f11eb37d967e40b327fff54eb28348d49546a3fb2b89f2dc3c70c701e0272591f774ac3c0e9809e7b1ff33b3c67ffac2923798adbacc6c333c4ebd687576b3a1f425df328d675b60b0c03e51d010b3119a07ea418faea0b83860d1a072958d7045166460f357aba9efc91e13eacbf79b345b349e09b055ce6eddc92dd1a64d988a9b6c8af35c9982b57b54363e405d44c5ebe8ebeb81adb97dbe11159a8c08ed39c463188caff998fad9f9995a73ec388c2bb6767c7cf4f721e409a8e3e8227455e32bd0b2fae4d33b9201c58b98bcb2e9ca87c2878e5fa4157db9381521bc88648866460a160b053a3f3c7eccadc411abdfa964a2a4a9dd3eeb96f8f5ea35570a8299817b5ee1e6a696985e136253265fb8cc2f3e5bd57cab6c587eefda510db8605b654bb5a89595368f384a11e329e5530629f0bcfc8264b3246e6b24181d65aa09d54d2b791404a9cbb7bc75af635f36eef432e41393e6cce2ed4adfd88ac7c5c06c307ad46d569434224e2bcc008b906471ead2941d812433e6b2280e3d23cb1905d49534922c40a09d074a193e3e408e20bff0c103e0bcf26b0f595874e6db79e703c6a34133676ee44c6bc189566a2731b324f4270e668b03095ec8397274e97fad4eaded6871817c51b856fe7c5fce914acd3c8e9065b63de008021a6319518109a6171ea209782f8cf329959a87665e58a67d655f693aa74034a325dd37efab1e4632534959ace1a7810b4d7c88c2b6ac8c61ab941ee9ec646da80b45c2ae195d4de28a371ffefd2c903026f963ef9342d4cea2bfbcc981456c651f84951544d836791cd28ae93cc807fc6196ff473d77b288c65625c913b16928a07212a4756273a74b93dc0ba57083a47dd16bb0ebf6235700ee1da6244963cdc38527cc6319f4ca561cc4e7fa56acfaa074bc68c3c230d870e0d9a92613cafc0d541d830b981b5181d41f0ed27bb27ae27cc11cf995a48edba21507d189d9dc16afcadb1a896eded3e02c8a75cef0ea0c84b702e330030d0cbb31af5322af50d189e8dac1fde45ff1f9e4abe47e4d4cd7f64c054d02b75f94dcb32f02bb85e06369fd9ff30e423f684f58f2851b3c7d2f4193be6c18133d644752f280c9c9f55130985975a1815f9d4d95d46585212081c5cd952597ace1f807e048041ee92894bf6fb9f9a95de9f8d1ec3b963f097e00ef2e09b7f98203a8087983df270d6ef6e42080b29c59992f5cfe73ec76049f88694e31e2c147f042b7ec5aeb7fd1916cee3cc10ca1aec8fc477d55e0363c9da3269b51bd1006772f094123431e7eca505a7e91b5ff4b44dd1aac91559bb33e5b444301b5ffbbbf384eb70c59a2544d32b83d3d4d746a11e57fe637560d55ea67a7144cb5ed2d7c600824033c9ddd3e0dd7adbcd7887495294d6bdeb69d3bdd9f2218199ab2bef840aeec4fab3dc6b233a370331913b5f892fc4ba77b6e8d1f46cd813f5317f2794ddeca5bfbd3e375ffa43b136baab600a5d5c8df544910b871b0ff299442ee0fe002f3d3c47d974b83ab275eaedbbecb8401701fd4f7487eb31c15ce029026c349620c937bdad23f5b48ded917fe2be55d01a55b3b60324adb7fb6e72d3efe052d3e36ead85a1e1fd54b07578f20b3c22762a6d9878bbff89ac0cdc013e1604188b9010e9b5cab4c12483bd039f3991359b9f28dfb5b0ae0515f91bc19687801aaf2e3b042bec463a07de8c87439970743145a5c8cdd56d21e9e79293370db7af003160a70c9db196f8f737756baa7738924f01e69e9988da2ca30618f1860e58602f681e271994931aca523a1b61440cc6fbdcecb6da8b93f04b069d8bd9291aaa8041d31454a93cf0198abc8b1e6d6696a69302aecbdf00aa6b72e436eb7c2cbd7851bf1f399f2425a8bc11778a2d009d4aed84201ba6f31dfb06461563b53a8473082db6ae7abe8a0bc08cc54df9f02a25491beb8480180ff073ae13b3b902caff42624f565937b63c93c98be8e9b52c312ac60097aafe5a2e03cef3c02bbda17aaaaf860a444a7fa8ab77961db692374e4973da4dabc3b4041e3c9cbf7311bc34dd1a4f8ca01d481d054487301976e9966d036575e4ccceeafdb99bc29e9bf2f6f45dc5e6eb3b04b5f85cad239c7b27d590640bd577e400ae130975d31d68cca48433ce8b3e8e8116be660ca5d3df022944c2da5aff48d74be6b136d755c8f736c07612faadb616c41fdee32df780180ef6a2a873fa23ae34e5e88f63e46ee8d6da5de081acbc7a8639eb6c803d11027a63bb93dd139146a742673d670e38ef6244a1618c3fe12a212c988175ece5fe3eeabf1588a2e7979e00f20cece1d6ddcfe5065a23e37b5bc0262d5a73bd165f58f587f45bde7447a8d6d8f76ce7e9e5696d71a07450e5b0d018f08ae0796cd4a377fa230df6760cdb88d57903514cb300860620fd426050a1969e1f5a15432c11e7941d74395719b690d9346782ec5a5744f2a54773397c4463efc4d8e514c5608e6d18c46f9847e1b73673b23c270c37be452fbf979c67bdb1b2430708b907f48339e47c9153889cd755ed8dc0830d3e2e70af2095062764d22a4ba64b860e9dff8d4c7f1c979ea95756eb9bddf7b279b6023f5a0af31be5a95093079c77bdeabc79f6695cd960819e2a717ad89d416b998bd527702e5b98e25ec98173d434cb4efa7bed20302c31beb871aa8f97654012ff13bec49200215b8b117953777c70d294d139238de6cea55d18d79f7a8fb01715c19380041d03ba4e62256d8533d3ee8e8d47686ee0b7162e543f1afddfdcd02ea89ecc8181cd674d2272f37b72fc1c718aa1165250c350a951d85ddf436f7337eb77acf094ac7f1cc21d1daf1e841e458a5045cd687f1256b0f095868f6f0f14775d0fee41f3584d532a44737655aa9892db824ba186fa4d72b619c4eee50fd3c6859ada718de15e850603aa197b4193e693ed64f1241d6eedea413e7d02fac47438bb204d9606047a871704cc42dec1d8b73e0aa12eef1f23b16f691b411e8a0435f7ddef1fe7abd0445adac7862e74e6d4704879414918351e4a6b0bf44260f429a436f44c10a2e5682aa7a55be2bb720ee272c7e50aeaeff6e73c4e56ceb3167ef69e131fb911dd56e9a2f5f26cabf3d424c6ab5f6bf7b5705d5ce778744f1bcd28938f0c4f98a34124183cc99be6b64b85641f81bf733a0448d04b580276956e1c721377f1ab1d0eefbc3839f66793c9ebf4996a847788a90702198cf6beb9da35f69e80709d36295c6a29076933226ed31bc9c9c8d151a577f874fc5ccb96d53bd2ed372419a887fa45d6d6792d48ffddb390026616c608f35d015e6de6da59cd69a85413e146d2fe079f0c6f1389e3d1030204cd79b6b6af233b8b880d806f54a6c752e132272b6b775e9f7b030796897f7ac674d53890c76818f5f6dd957bdb97ac4c6b95bf81a458080a828ee011c142e04ba3fb3dc260dd215c5e22167c01fe5871369ef18b6da4260bcfc41c72575620b2492a8cb6f42a0e8e7d41d263037f5f8dbd3578284591283573f03d3bfd55c54ec4c14233d88a594ec9afa47bde86857a0dd1ed8d7cc5411eecd4afb9fb0340b9d40983bc897e6d504fb7fa14ce08f853b8e79cf52e3bd5081a8406224815adb4aec4dc51263b47fa3512d2efef54e93117ea434421eaf5906ee76dad288c953de176f205673db4490d64a4f5f0715f101e2834e3b811e220a3f736202635e9bbaac3d1dc588e76ae21e77099d212f65a5220a4fb2a2579e6241be802bbf52cc1a053e940f0595c6d734188a170fb0d5c25fadb3c3ae1e35a89dc7182e0ccbbc9ba587f00bf225b03cef7c69c310ed8e6501e8354c62d1fff1d36da5587a22c4890594f60f488e64596d4fa14504776085d1a6ee690bbb13c03631643ac7cc1a8a6f253c39350866a96681ae172f2a1d5f0a92a6dda7ee53b093bbd87eea56c9065fcc7d4caca1c10d20253a6570f22f9cab1606d5f7e71d9fb428c1fda7968634b6d58fa5216b3495736512eb5d822fd4c5205016a6205e3e0eb5d58530ed5a9a551ef8c156d42f7060355891f3b0387e9fe85e1c29f77abb1a12e90e989dce488a7d23be6d19dd9df5dd26c16c4b65959e1ec2e468295e0e2445543b49cdbbe2ba3c61bf49f22d5b1bbf123d5a92c51db48dbe386c62fd59bbc41655501fd7473eb03cf9a3c40504064363fec8920cfab002b7e085e2ecb1658db979f3313a56007d4337802b9a80c9da62efb4ef50e7bb885bad8532861489d6a8394cb0eeadd95aa364fa9b1a71a98dff1da58c92d3e6573f81b9c5a09f97779db23523d45d02e6c8a4afcda435e1fb8be854716a22e56873479f1d6ebd5ee74abfc78c16c24576754986d0def1bcea68f9e39072598c4969d8c7a4b263a95714e837a26e7be8f85de8bc3b1ce9285673bded989e27a92df6b52578b2eccb6bc518c5ff4d7916cbb0e602ff0c662acb5fc99e1dd94cc259d0176bbd9b85de57f1a82c479651e353313698e7dcaf2b43344989ecef2a96fe8e805e92f90bc1f6819b06be60ec8cd4e43213b0f3d3a40b131d7b5121c9ca7cebbe17c5de44877845d75d545cb937ddd840c7e0d50b287f1ada9968e65c60402ff59f1e8dec3f5a062232810956265f9751434c19ca3d13fdb7ea12733e5b9d1e51832043a848b1bc0be96228385bd66331a77a02800bf13abeafc398e63548233b86afbf87938754061b28fa7fc7eb77cbd5f366cc0cf03c5f272801e86923ef81049aa10523111520c60e2ae18ec872aed13e4e28e5476e440254f1791e9fc605c70ffba0a4f0d55e14b69efdf4167a9366e675e301f5c1460af59bf89f1d91a8dd209eb08efcb907601452902241fef172a0531eeae1435f3a4c2c6b824379d756f715eb6500c87536e47734498fcfd5548e0369312a88754b3f2d00c4daf10e398e6c1de68d09bbbb39a9ac36fe2b48d7f553c411ae39b212b2f9ead80ab2406a25ef09408cba64a8554ba098d20f69e7bc69a99b419760b507aecde3e487f3b440a5c58e43794dc7c159a1ee8896b225883449ebbcb0749de66cd84b03c6e924942b781dc57b3dffda29a953887fb35711208962066708f56c10b5f81398fd0e6c17f092a529790015d5eb431c98da2c1f1c5a93223ecabd58d20138ce4a3c6471dde5a082f99377e6b2045fd73475c37b45ddac30e939cf8ee98456776e09a0c5a3c4ca5cb598c221b7d16f14671889bc124b9ae7e6aca7e27deed99c1ac6963503fc660fd98af1a8b80553d"]}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x5}]}, 0x1164}, 0x1, 0x0, 0x0, 0x4004000}, 0x6000800) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001e80)=0x8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001ec0)=""/77) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000001f40)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x1345d000) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r11, &(0x7f0000000740)=""/377, 0x179) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [28, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001f089bd367ba0d70238b93774b4cc7a6ae2eb169b223ef268405eef43fe3a240d25fa0a78e424277396f63100d18ebff13e137a6ecba4015f7f93096967cc3d773749dd8f5595c662364", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000024002f800c0002000203aaaaaaaaaaaa08000100018000000c0003800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [25, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r8, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) r8 = socket(0x2, 0x3, 0x6) bind$inet(r8, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) socket(0x2, 0x3, 0x6) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000380)=""/6, 0x6}], 0x7, 0xfff, 0x5) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000680)=0x200) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000016100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a050000000000000000000700000048010000180a010200000000000000000500000a08000740000000040c00054000000000000000010c000540000000000000000109000100"], 0x8e30}, 0x1, 0x0, 0x0, 0x4}, 0x8010) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) socket$nl_netfilter(0x10, 0x3, 0xc) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc00, 0x2, 0x6, "54d208b5bdf6814e8f260754f98b3cc2d53db1"}) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) r5 = timerfd_create(0x8, 0x80800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) dup(r5) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) timerfd_create(0x8, 0x80800) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5457, &(0x7f0000000000)={0xb8a3, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) timerfd_create(0x8, 0x80800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) timerfd_create(0x8, 0x80800) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r0], 0x0) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x14) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 30] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xffffbdfb) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002", @ANYRESDEC=r1], 0x104}}, 0x0) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r2}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa, 0x0}) capset(&(0x7f0000000200)={0x20071026, r2}, &(0x7f0000000300)={0x8, 0x3, 0x5, 0xfffffff7, 0x3, 0x8}) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7, 0x7, 0xfff, 0x80000001, 0xa}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq minimized 30 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 27] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 25] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 24] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2], 0x40}}, 0x404c024) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r4, 0x0, &(0x7f0000001380)) accept(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r3, 0x0, &(0x7f0000001380)) accept(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r3, 0x0, &(0x7f0000001380)) accept(r2, 0x0, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r2, 0x0, &(0x7f0000001380)) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$key(0xf, 0x3, 0x2) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) program crashed: possible deadlock in serial8250_handle_irq testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2] detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) program did not crash minimized 30 calls -> 3 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program crashed: possible deadlock in serial8250_handle_irq bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xffffbdfb) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program did not crash testing program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m19.09738232s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq simplifying C reproducer testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing compiled C program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD program crashed: possible deadlock in serial8250_handle_irq testing program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program crashed: possible deadlock in serial8250_handle_irq validation run: crashed=true testing program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program crashed: possible deadlock in serial8250_handle_irq validation run: crashed=true testing program (duration=1m19.09738232s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ttyS3-ioctl$TIOCMSET-openat$ttyS3-ioctl$TIOCSETD-ioctl$TIOCSETD detailed listing: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xffffbdfb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) program crashed: possible deadlock in serial8250_handle_irq validation run: crashed=true reproducing took 3h10m29.603954173s repro crashed as (corrupted=false): ===================================================== WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected syzkaller #0 Not tainted ----------------------------------------------------- kworker/u8:1/13 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: ffffffff8f1127b8 (disc_data_lock){.?.+}-{3:3}, at: sp_get drivers/net/hamradio/6pack.c:370 [inline] ffffffff8f1127b8 (disc_data_lock){.?.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 and this task is already holding: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 drivers/tty/serial/serial_core.c:83 which would create a new lock dependency: (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.?.+}-{3:3} but this new dependency connects a HARDIRQ-irq-safe lock: (&port_lock_key){-.-.}-{3:3} ... which became HARDIRQ-irq-safe at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 rest_init+0x2de/0x300 init/main.c:756 start_kernel+0x3a9/0x410 init/main.c:1109 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 to a HARDIRQ-irq-unsafe lock: (disc_data_lock){.?.+}-{3:3} ... which became HARDIRQ-irq-unsafe at: ... lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(disc_data_lock); local_irq_disable(); lock(&port_lock_key); lock(disc_data_lock); lock(&port_lock_key); *** DEADLOCK *** 6 locks held by kworker/u8:1/13: #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3238 [inline] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3346 #1: ffffc90000127ba0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3239 [inline] #1: ffffc90000127ba0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3346 #2: ffff888141b28ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x6e0 drivers/tty/tty_buffer.c:467 #3: ffff88807808d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 drivers/tty/tty_ldisc.c:263 #4: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] #4: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 drivers/tty/serial/serial_core.c:83 #5: ffff88807808d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 drivers/tty/tty_ldisc.c:263 the dependencies between HARDIRQ-irq-safe lock and the holding lock: -> (&port_lock_key){-.-.}-{3:3} { IN-HARDIRQ-W at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 rest_init+0x2de/0x300 init/main.c:756 start_kernel+0x3a9/0x410 init/main.c:1109 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 IN-SOFTIRQ-W at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0x5e/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 __sanitizer_cov_trace_pc+0x0/0x70 deliver_ptype_list_skb net/core/dev.c:2483 [inline] __netif_receive_skb_core+0x393a/0x4020 net/core/dev.c:5997 __netif_receive_skb_one_core net/core/dev.c:6038 [inline] __netif_receive_skb+0x72/0x380 net/core/dev.c:6153 process_backlog+0x60e/0x14f0 net/core/dev.c:6505 __napi_poll+0xc7/0x360 net/core/dev.c:7555 napi_poll net/core/dev.c:7618 [inline] net_rx_action+0x707/0xe30 net/core/dev.c:7745 handle_softirqs+0x286/0x870 kernel/softirq.c:579 do_softirq+0xec/0x180 kernel/softirq.c:480 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:910 [inline] __dev_queue_xmit+0x1d79/0x3b50 net/core/dev.c:4752 dev_queue_xmit include/linux/netdevice.h:3361 [inline] neigh_hh_output include/net/neighbour.h:531 [inline] neigh_output include/net/neighbour.h:545 [inline] ip6_finish_output2+0xf70/0x1480 net/ipv6/ip6_output.c:136 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247 NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318 mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INITIAL USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] class_uart_port_lock_irqsave_constructor include/linux/serial_core.h:797 [inline] serial8250_do_set_termios+0x4d1/0x1c30 drivers/tty/serial/8250/8250_port.c:2760 uart_set_options+0x3c2/0x5b0 drivers/tty/serial/serial_core.c:2262 serial8250_console_setup+0x2f4/0x3c0 drivers/tty/serial/8250/8250_port.c:3405 univ8250_console_setup+0x43a/0x540 drivers/tty/serial/8250/8250_core.c:426 console_call_setup kernel/printk/printk.c:3773 [inline] try_enable_preferred_console+0x4e4/0x650 kernel/printk/printk.c:3817 register_console+0x551/0xf90 kernel/printk/printk.c:4011 univ8250_console_init+0x3a/0x70 drivers/tty/serial/8250/8250_core.c:511 console_init+0x10e/0x430 kernel/printk/printk.c:4298 start_kernel+0x254/0x410 init/main.c:1047 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 } ... key at: [] port_lock_key+0x0/0x20 the dependencies between the lock to be acquired and HARDIRQ-irq-unsafe lock: -> (disc_data_lock){.?.+}-{3:3} { IN-HARDIRQ-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 serial8250_handle_irq+0x633/0xbb0 drivers/tty/serial/8250/8250_port.c:1827 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] uart_port_unlock_irqrestore include/linux/serial_core.h:788 [inline] uart_port_unlock_deref+0x111/0x2f0 drivers/tty/serial/serial_core.c:91 uart_write+0xe8/0x130 drivers/tty/serial/serial_core.c:634 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 HARDIRQ-ON-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 SOFTIRQ-ON-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INITIAL USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_write_lock_irq include/linux/rwlock_api_smp.h:195 [inline] _raw_write_lock_irq+0xa2/0xf0 kernel/locking/spinlock.c:326 sixpack_close+0x2c/0x280 drivers/net/hamradio/6pack.c:641 tty_ldisc_kill+0xa3/0x1a0 drivers/tty/tty_ldisc.c:613 tty_ldisc_release+0x174/0x200 drivers/tty/tty_ldisc.c:781 tty_release_struct+0x2a/0xd0 drivers/tty/tty_io.c:1681 tty_release+0xcb0/0x1640 drivers/tty/tty_io.c:1852 __fput+0x44c/0xa70 fs/file_table.c:468 task_work_run+0x1d4/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xec/0x130 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0xfa0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f INITIAL READ USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 } ... key at: [] disc_data_lock+0x18/0x100 6pack.c:-1 ... acquired at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 __start_tx+0x33b/0x480 drivers/tty/serial/8250/8250_port.c:1426 __uart_start+0x23f/0x460 drivers/tty/serial/serial_core.c:161 uart_write+0xdc/0x130 drivers/tty/serial/serial_core.c:633 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 stack backtrace: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Workqueue: events_unbound flush_to_ldisc Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_bad_irq_dependency kernel/locking/lockdep.c:2616 [inline] check_irq_usage kernel/locking/lockdep.c:2857 [inline] check_prev_add kernel/locking/lockdep.c:3169 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0x1f05/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 __start_tx+0x33b/0x480 drivers/tty/serial/8250/8250_port.c:1426 __uart_start+0x23f/0x460 drivers/tty/serial/serial_core.c:161 uart_write+0xdc/0x130 drivers/tty/serial/serial_core.c:633 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): ===================================================== WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected syzkaller #0 Not tainted ----------------------------------------------------- kworker/u8:1/13 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: ffffffff8f1127b8 (disc_data_lock){.?.+}-{3:3}, at: sp_get drivers/net/hamradio/6pack.c:370 [inline] ffffffff8f1127b8 (disc_data_lock){.?.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 and this task is already holding: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 drivers/tty/serial/serial_core.c:83 which would create a new lock dependency: (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.?.+}-{3:3} but this new dependency connects a HARDIRQ-irq-safe lock: (&port_lock_key){-.-.}-{3:3} ... which became HARDIRQ-irq-safe at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 rest_init+0x2de/0x300 init/main.c:756 start_kernel+0x3a9/0x410 init/main.c:1109 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 to a HARDIRQ-irq-unsafe lock: (disc_data_lock){.?.+}-{3:3} ... which became HARDIRQ-irq-unsafe at: ... lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(disc_data_lock); local_irq_disable(); lock(&port_lock_key); lock(disc_data_lock); lock(&port_lock_key); *** DEADLOCK *** 6 locks held by kworker/u8:1/13: #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3238 [inline] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3346 #1: ffffc90000127ba0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3239 [inline] #1: ffffc90000127ba0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3346 #2: ffff888141b28ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x6e0 drivers/tty/tty_buffer.c:467 #3: ffff88807808d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 drivers/tty/tty_ldisc.c:263 #4: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] #4: ffffffff9a263db8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 drivers/tty/serial/serial_core.c:83 #5: ffff88807808d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 drivers/tty/tty_ldisc.c:263 the dependencies between HARDIRQ-irq-safe lock and the holding lock: -> (&port_lock_key){-.-.}-{3:3} { IN-HARDIRQ-W at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 native_safe_halt arch/x86/include/asm/irqflags.h:48 [inline] pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:81 arch_safe_halt arch/x86/include/asm/paravirt.h:107 [inline] default_idle+0x13/0x20 arch/x86/kernel/process.c:767 default_idle_call+0x74/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:190 [inline] do_idle+0x1e8/0x510 kernel/sched/idle.c:330 cpu_startup_entry+0x44/0x60 kernel/sched/idle.c:428 rest_init+0x2de/0x300 init/main.c:756 start_kernel+0x3a9/0x410 init/main.c:1109 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 IN-SOFTIRQ-W at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] serial8250_handle_irq+0x6b/0xbb0 drivers/tty/serial/8250/8250_port.c:1798 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0x5e/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 __sanitizer_cov_trace_pc+0x0/0x70 deliver_ptype_list_skb net/core/dev.c:2483 [inline] __netif_receive_skb_core+0x393a/0x4020 net/core/dev.c:5997 __netif_receive_skb_one_core net/core/dev.c:6038 [inline] __netif_receive_skb+0x72/0x380 net/core/dev.c:6153 process_backlog+0x60e/0x14f0 net/core/dev.c:6505 __napi_poll+0xc7/0x360 net/core/dev.c:7555 napi_poll net/core/dev.c:7618 [inline] net_rx_action+0x707/0xe30 net/core/dev.c:7745 handle_softirqs+0x286/0x870 kernel/softirq.c:579 do_softirq+0xec/0x180 kernel/softirq.c:480 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:910 [inline] __dev_queue_xmit+0x1d79/0x3b50 net/core/dev.c:4752 dev_queue_xmit include/linux/netdevice.h:3361 [inline] neigh_hh_output include/net/neighbour.h:531 [inline] neigh_output include/net/neighbour.h:545 [inline] ip6_finish_output2+0xf70/0x1480 net/ipv6/ip6_output.c:136 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247 NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318 mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INITIAL USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xa7/0xf0 kernel/locking/spinlock.c:162 uart_port_lock_irqsave include/linux/serial_core.h:717 [inline] class_uart_port_lock_irqsave_constructor include/linux/serial_core.h:797 [inline] serial8250_do_set_termios+0x4d1/0x1c30 drivers/tty/serial/8250/8250_port.c:2760 uart_set_options+0x3c2/0x5b0 drivers/tty/serial/serial_core.c:2262 serial8250_console_setup+0x2f4/0x3c0 drivers/tty/serial/8250/8250_port.c:3405 univ8250_console_setup+0x43a/0x540 drivers/tty/serial/8250/8250_core.c:426 console_call_setup kernel/printk/printk.c:3773 [inline] try_enable_preferred_console+0x4e4/0x650 kernel/printk/printk.c:3817 register_console+0x551/0xf90 kernel/printk/printk.c:4011 univ8250_console_init+0x3a/0x70 drivers/tty/serial/8250/8250_core.c:511 console_init+0x10e/0x430 kernel/printk/printk.c:4298 start_kernel+0x254/0x410 init/main.c:1047 x86_64_start_reservations+0x24/0x30 arch/x86/kernel/head64.c:310 x86_64_start_kernel+0x143/0x1c0 arch/x86/kernel/head64.c:291 common_startup_64+0x13e/0x147 } ... key at: [] port_lock_key+0x0/0x20 the dependencies between the lock to be acquired and HARDIRQ-irq-unsafe lock: -> (disc_data_lock){.?.+}-{3:3} { IN-HARDIRQ-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 serial8250_handle_irq+0x633/0xbb0 drivers/tty/serial/8250/8250_port.c:1827 serial8250_default_handle_irq+0xbf/0x200 drivers/tty/serial/8250/8250_port.c:1846 serial8250_interrupt+0x8d/0x180 drivers/tty/serial/8250/8250_core.c:82 __handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203 handle_irq_event_percpu kernel/irq/handle.c:240 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257 handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:-1 [inline] __common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] _raw_spin_unlock_irqrestore+0xa8/0x110 kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] uart_port_unlock_irqrestore include/linux/serial_core.h:788 [inline] uart_port_unlock_deref+0x111/0x2f0 drivers/tty/serial/serial_core.c:91 uart_write+0xe8/0x130 drivers/tty/serial/serial_core.c:634 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 HARDIRQ-ON-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 SOFTIRQ-ON-R at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INITIAL USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_write_lock_irq include/linux/rwlock_api_smp.h:195 [inline] _raw_write_lock_irq+0xa2/0xf0 kernel/locking/spinlock.c:326 sixpack_close+0x2c/0x280 drivers/net/hamradio/6pack.c:641 tty_ldisc_kill+0xa3/0x1a0 drivers/tty/tty_ldisc.c:613 tty_ldisc_release+0x174/0x200 drivers/tty/tty_ldisc.c:781 tty_release_struct+0x2a/0xd0 drivers/tty/tty_io.c:1681 tty_release+0xcb0/0x1640 drivers/tty/tty_io.c:1852 __fput+0x44c/0xa70 fs/file_table.c:468 task_work_run+0x1d4/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xec/0x130 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x2bd/0xfa0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f INITIAL READ USE at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_receive_buf+0x5c/0x1450 drivers/net/hamradio/6pack.c:433 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 } ... key at: [] disc_data_lock+0x18/0x100 6pack.c:-1 ... acquired at: lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 __start_tx+0x33b/0x480 drivers/tty/serial/8250/8250_port.c:1426 __uart_start+0x23f/0x460 drivers/tty/serial/serial_core.c:161 uart_write+0xdc/0x130 drivers/tty/serial/serial_core.c:633 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 stack backtrace: CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 Workqueue: events_unbound flush_to_ldisc Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_bad_irq_dependency kernel/locking/lockdep.c:2616 [inline] check_irq_usage kernel/locking/lockdep.c:2857 [inline] check_prev_add kernel/locking/lockdep.c:3169 [inline] check_prevs_add kernel/locking/lockdep.c:3284 [inline] validate_chain+0x1f05/0x2140 kernel/locking/lockdep.c:3908 __lock_acquire+0xab9/0xd20 kernel/locking/lockdep.c:5237 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5868 __raw_read_lock include/linux/rwlock_api_smp.h:150 [inline] _raw_read_lock+0x36/0x50 kernel/locking/spinlock.c:228 sp_get drivers/net/hamradio/6pack.c:370 [inline] sixpack_write_wakeup+0x30/0x480 drivers/net/hamradio/6pack.c:391 tty_wakeup+0xbe/0x100 drivers/tty/tty_io.c:515 tty_port_default_wakeup+0xfb/0x170 drivers/tty/tty_port.c:67 serial8250_tx_chars+0x72e/0x970 drivers/tty/serial/8250/8250_port.c:1719 __start_tx+0x33b/0x480 drivers/tty/serial/8250/8250_port.c:1426 __uart_start+0x23f/0x460 drivers/tty/serial/serial_core.c:161 uart_write+0xdc/0x130 drivers/tty/serial/serial_core.c:633 decode_prio_command drivers/net/hamradio/6pack.c:868 [inline] sixpack_decode drivers/net/hamradio/6pack.c:943 [inline] sixpack_receive_buf+0x447/0x1450 drivers/net/hamradio/6pack.c:447 tty_ldisc_receive_buf+0x119/0x160 drivers/tty/tty_buffer.c:391 tty_port_default_receive_buf+0x6e/0xa0 drivers/tty/tty_port.c:37 receive_buf drivers/tty/tty_buffer.c:445 [inline] flush_to_ldisc+0x24a/0x6e0 drivers/tty/tty_buffer.c:495 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245