ion found [ 2997.685584][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.692009][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.698522][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.704958][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.711503][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.717994][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.725620][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.732056][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.738623][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.745056][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.751612][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.758137][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.764618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.771114][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.778914][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.785361][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.791907][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.798398][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.804877][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.811392][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.817941][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.824370][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.831073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.838170][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.844654][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.851143][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.857667][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.864094][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.870715][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.877201][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.883678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.890171][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.896708][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.903159][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.909703][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.916183][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.922649][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.929136][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.935677][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.942103][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.948627][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2997.955056][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.957284][ C1] vcan0: j1939_tp_rxtimer: 0x0000000090113549: abort rx timeout. Force session deactivation [ 2997.961579][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found 04:49:01 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 2997.978123][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2997.986245][T22308] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2997.996699][T14069] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 04:49:01 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 2998.052623][T14069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.080582][T14069] usb 3-1: config 0 descriptor?? [ 2998.122540][ C0] vcan0: j1939_tp_rxtimer: 0x0000000079c74482: abort rx timeout. Force session deactivation [ 2998.132884][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.174722][T22313] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2998.295920][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.304438][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.352898][ C0] vcan0: j1939_tp_rxtimer: 0x00000000970cb574: rx timeout, send abort [ 2998.693202][T14069] usbhid 3-1:0.0: can't add hid device: -71 [ 2998.699513][T14069] usbhid: probe of 3-1:0.0 failed with error -71 [ 2998.743988][T14069] usb 3-1: USB disconnect, device number 58 [ 2998.861324][ C0] vcan0: j1939_tp_rxtimer: 0x00000000970cb574: abort rx timeout. Force session deactivation 04:49:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:02 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:02 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:02 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 2999.218031][ C0] vcan0: j1939_tp_rxtimer: 0x0000000079f3c3d2: rx timeout, send abort [ 2999.226422][T22331] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2999.265915][T22333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2999.340188][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.435627][ C1] vcan0: j1939_tp_rxtimer: 0x0000000087af15ea: rx timeout, send abort [ 2999.444282][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006350e707: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2999.459551][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cc7e1d6d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2999.459667][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000cc7e1d6d: last 00 [ 2999.474003][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b8efd90b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2999.495604][ C0] vcan0: j1939_xtp_rx_dat_one: 0x00000000300eb489: last 15 [ 2999.569186][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ddaeb9b9: 0x00000: (5) Maximal retransmit request limit reached [ 2999.580706][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000006bbdd5a0: last 00 [ 2999.580767][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000006bbdd5a0: 0x00000: (5) Maximal retransmit request limit reached [ 2999.588125][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000006bbdd5a0: last 00 [ 2999.599483][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d47c7d1c: 0x00000: (5) Maximal retransmit request limit reached [ 2999.606845][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.625483][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.631989][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.639300][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.646497][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.653721][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.660284][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.668604][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.675540][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.684011][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.690997][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.698265][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.705161][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.713708][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.720502][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.728782][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.734800][ C0] vcan0: j1939_tp_rxtimer: 0x0000000079f3c3d2: abort rx timeout. Force session deactivation [ 2999.735248][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.752679][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.759235][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.766689][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.773174][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.781010][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.788663][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.795955][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.803314][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.810610][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.817631][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.825811][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.831325][ T2815] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2999.832285][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.847156][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.853645][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.861724][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.868266][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.875560][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.882041][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.889343][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.896542][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.903761][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.910315][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.917596][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.924069][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.931358][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.937904][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.945112][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.951656][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.959019][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.965573][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.972786][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.979326][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 2999.986598][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 2999.993068][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.000357][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.006901][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.014114][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.020687][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.027954][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.034439][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.041729][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.048268][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.055571][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.062052][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.070176][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.076734][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.083951][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.090529][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.097814][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.104302][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.111960][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.118515][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.125796][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.132273][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.140325][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.146883][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.154085][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.160627][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.167911][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.174400][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.181709][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.188262][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.196483][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.202971][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.210266][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.216810][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.225198][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.231741][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.240168][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.246719][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.253927][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.260505][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.266308][ T2815] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3000.267772][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.285039][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.292429][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.298988][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.302646][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3000.306444][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.306514][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.306529][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.306582][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.345678][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.353213][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.360596][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.368089][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.375230][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3000.375301][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.391592][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.399312][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.405902][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.413118][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.420220][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.422691][ T2815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3000.427498][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.427563][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.427582][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.466511][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.473735][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.480291][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.487627][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.494111][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.501398][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.508589][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.510076][ T2815] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3000.515860][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.515923][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.515938][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.515990][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.545663][ T2815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3000.552366][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.566901][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.574118][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.581195][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.589067][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.596232][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.603451][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.610011][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.617292][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.623773][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.631053][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.637602][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.644815][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.652199][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.659486][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.667213][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.674433][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.680982][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.688253][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.694741][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.696880][ T2815] usb 3-1: config 0 descriptor?? [ 3000.702045][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.713529][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.720811][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.728422][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.736044][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.742526][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.749815][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.756375][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.763582][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.770125][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.777399][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.783874][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.791197][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.799000][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.806277][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.813195][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.820491][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.827051][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.834261][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.841367][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.848656][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.855134][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.862430][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.869008][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.876287][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.882789][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.890386][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.897025][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.904235][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.910777][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.918071][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.924557][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.931851][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.938395][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.945695][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.952202][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.959937][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.966481][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.973690][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.980246][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3000.987962][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3000.995245][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.002557][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.009984][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.017994][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.025248][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.033225][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.040084][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.048272][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.054759][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.062590][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.069144][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.076516][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.082995][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.090281][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.096828][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.104037][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.110580][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.117849][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.125057][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.133467][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.140797][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.148502][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.155857][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.163069][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.169732][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.177015][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.184662][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.191947][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.199113][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.206408][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.212889][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.220179][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.226730][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.233944][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.240511][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.247817][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.255222][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.255969][ C0] vcan0: j1939_tp_rxtimer: 0x000000006f76e91b: rx timeout, send abort [ 3001.262496][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.277162][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.284369][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.292134][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.299419][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.305965][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.313176][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.319713][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.326989][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.333467][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.340750][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.346047][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.347326][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.356151][ T2815] usbhid 3-1:0.0: can't add hid device: -71 [ 3001.362472][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.374857][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.382156][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.388745][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.394943][ T2815] usbhid: probe of 3-1:0.0 failed with error -71 [ 3001.396030][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.396098][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.396112][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.396184][ C1] vcan0: j1939_tp_rxtimer: 0x0000000087af15ea: abort rx timeout. Force session deactivation [ 3001.418920][ T2815] usb 3-1: USB disconnect, device number 59 [ 3001.425255][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.530817][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.538226][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.545954][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.553298][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.559824][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.567086][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.573565][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.580823][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.588113][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.595839][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.603541][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.610804][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.617918][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.625696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.632172][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.639428][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.646644][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.654758][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.662267][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.669542][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.677229][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.684573][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.692128][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.700352][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.707158][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.714380][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.720913][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.728165][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.735401][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.742666][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.749189][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.756452][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.763645][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.770806][ C0] vcan0: j1939_tp_rxtimer: 0x000000006f76e91b: abort rx timeout. Force session deactivation [ 3001.770895][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.787455][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.794668][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.801193][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.808461][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.814941][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.823331][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.830325][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.837586][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.844064][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.852089][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.861237][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.868499][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.874979][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.883324][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.889886][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.897154][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.903997][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.912414][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.919310][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.927294][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.935025][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.942308][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.949523][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.956805][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.963992][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.971254][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.977776][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.984986][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3001.991544][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3001.998820][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.005300][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.012576][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.020141][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.027584][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.034832][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.042122][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.048666][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.056731][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.063305][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.070591][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.077137][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.084344][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.090880][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.098758][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.105835][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.114199][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.120749][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.128756][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.135234][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.143748][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.150297][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.157577][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.164058][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.171340][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.178581][ C1] vcan0: j1939_xtp_rx_dat_one: 0x000000005682f79b: last 00 [ 3002.185946][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3002.437792][T22355] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3002.457544][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:05 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3002.673441][T22364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3002.793992][T22365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:06 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3002.976754][T14180] usb 3-1: new high-speed USB device number 60 using dummy_hcd 04:49:06 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3003.138168][T22379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3003.245472][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:06 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:06 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3003.399549][T14180] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3003.432319][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:49:06 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:06 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3003.522561][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3003.548295][T14180] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3003.565015][T22394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3003.580111][T14180] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3003.612106][T14180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.651548][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3003.666936][T14180] usb 3-1: config 0 descriptor?? [ 3003.710792][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c84cb407: rx timeout, send abort [ 3004.265467][T14180] usbhid 3-1:0.0: can't add hid device: -71 [ 3004.271585][T14180] usbhid: probe of 3-1:0.0 failed with error -71 [ 3004.316549][T14180] usb 3-1: USB disconnect, device number 60 [ 3004.388611][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.430256][ C1] vcan0: j1939_tp_txtimer: 0x0000000047cedbab: tx aborted with unknown reason: -2 [ 3004.460338][ C0] vcan0: j1939_tp_txtimer: 0x00000000b0ce38de: tx aborted with unknown reason: -2 [ 3004.696734][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.700682][ C0] vcan0: j1939_tp_rxtimer: 0x0000000030ad8e0c: rx timeout, send abort [ 3004.704965][ C1] vcan0: j1939_tp_rxtimer: 0x0000000055885a32: rx timeout, send abort [ 3004.860097][ T2815] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3004.942462][ C1] vcan0: j1939_tp_rxtimer: 0x0000000047cedbab: abort rx timeout. Force session deactivation [ 3004.969656][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b0ce38de: abort rx timeout. Force session deactivation [ 3005.213235][ C0] vcan0: j1939_tp_rxtimer: 0x0000000030ad8e0c: abort rx timeout. Force session deactivation [ 3005.221339][ C1] vcan0: j1939_tp_rxtimer: 0x0000000055885a32: abort rx timeout. Force session deactivation [ 3005.386748][ T2815] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3005.418618][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3005.456966][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3005.473850][ T2815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3005.496629][ T2815] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3005.506343][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3005.523315][ T2815] usb 2-1: config 0 descriptor?? [ 3005.737489][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.445786][ T2815] usbhid 2-1:0.0: can't add hid device: -71 [ 3006.451865][ T2815] usbhid: probe of 2-1:0.0 failed with error -71 [ 3006.477115][ T2815] usb 2-1: USB disconnect, device number 98 [ 3006.785769][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:10 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:10 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:10 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa2a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:10 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3007.338301][ T9438] usb 3-1: new high-speed USB device number 61 using dummy_hcd 04:49:10 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3007.432276][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.440579][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.519084][ T7052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.607254][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.627625][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:10 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:11 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3007.876295][ T9438] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3007.910477][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:49:11 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3007.983865][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3008.030639][ T9438] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3008.085749][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a96d05dc: rx timeout, send abort [ 3008.117690][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ca8563da: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3008.119234][ T9438] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3008.132131][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000000cddd734: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3008.155605][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000e08bf712: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3008.248232][ T9438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.294070][ T9438] usb 3-1: config 0 descriptor?? [ 3008.594139][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a96d05dc: abort rx timeout. Force session deactivation [ 3008.860448][T14180] net_ratelimit: 1 callbacks suppressed [ 3008.860460][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3008.885900][ T9438] usbhid 3-1:0.0: can't add hid device: -71 [ 3008.892489][ T9438] usbhid: probe of 3-1:0.0 failed with error -71 [ 3008.935754][ T9438] usb 3-1: USB disconnect, device number 61 [ 3009.077010][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d90028cd: rx timeout, send abort 04:49:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 3009.585250][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d90028cd: abort rx timeout. Force session deactivation [ 3009.755715][T14180] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3009.814465][T10410] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3009.896168][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3010.032945][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cf84ac1a: rx timeout, send abort [ 3010.117345][T14180] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3010.134246][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3010.154956][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3010.165269][T14180] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3010.187601][T14180] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3010.213653][T14180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.235668][T10410] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3010.252673][T14180] usb 3-1: config 0 descriptor?? [ 3010.265592][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3010.276654][ C1] vcan0: j1939_tp_rxtimer: 0x00000000aea7328d: rx timeout, send abort [ 3010.276751][ C1] vcan0: j1939_tp_rxtimer: 0x00000000eef53fa4: rx timeout, send abort [ 3010.295945][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000aea7328d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3010.310332][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000eef53fa4: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3010.371565][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3010.389590][T10410] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3010.424417][T10410] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3010.444341][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.466798][T10410] usb 2-1: config 0 descriptor?? [ 3010.472245][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3010.541216][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cf84ac1a: abort rx timeout. Force session deactivation [ 3010.877548][T14180] usbhid 3-1:0.0: can't add hid device: -71 [ 3010.883650][T14180] usbhid: probe of 3-1:0.0 failed with error -71 [ 3010.913142][T14180] usb 3-1: USB disconnect, device number 62 [ 3010.945055][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.285796][T10410] usbhid 2-1:0.0: can't add hid device: -71 [ 3011.305684][T10410] usbhid: probe of 2-1:0.0 failed with error -71 [ 3011.338248][T10410] usb 2-1: USB disconnect, device number 99 04:49:14 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340), 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:14 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:14 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:14 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 3011.898089][T22510] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3011.976789][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3012.135660][T10410] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3012.517301][T10410] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3012.543415][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3012.593362][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3012.629946][T10410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 04:49:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3012.678727][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 3012.688547][T10410] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 04:49:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3012.739321][T10410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.772584][T22516] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3012.795683][T10410] usb 3-1: config 0 descriptor?? [ 3012.813505][T22517] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3012.939640][ C0] vcan0: j1939_tp_rxtimer: 0x000000001e78156f: rx timeout, send abort [ 3012.960205][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a42a7bb6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3012.974698][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000852db756: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3012.989121][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000000ff32d9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3013.003626][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 3013.009926][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.016469][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.023655][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.030234][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 04:49:16 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:16 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3013.036784][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.043272][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.049820][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.056376][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.062861][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.069685][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.076238][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.082734][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.089297][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.096157][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.102645][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.109198][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.116137][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.122638][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.129202][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.135888][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.142949][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.149937][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.156503][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.163006][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.170454][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.182749][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.189295][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.195848][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.203405][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.210048][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.217438][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.224538][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.231936][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.238656][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.246373][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.253418][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.259977][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.266526][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.273018][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.280304][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.286854][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.293346][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.299900][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.306457][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.314061][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.320963][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.328225][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.334777][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.341322][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.347888][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.354482][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.361657][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.369612][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.376881][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.377337][T10410] usbhid 3-1:0.0: can't add hid device: -71 [ 3013.383914][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.383976][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.404423][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.411173][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.413896][T10410] usbhid: probe of 3-1:0.0 failed with error -71 [ 3013.417714][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.417776][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.417832][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.440835][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.450346][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.456912][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.463523][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.470256][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.476837][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.483337][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.490031][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.497899][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.505735][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.512826][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.520684][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.527855][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.534360][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.540921][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.543612][T10410] usb 3-1: USB disconnect, device number 63 [ 3013.547476][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.547543][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.547600][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.573229][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.579801][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.587621][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.594144][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.597659][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3013.600712][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.616775][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.623745][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.630353][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.636941][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.643462][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.650906][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.657720][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.664359][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.671045][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.677624][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.684147][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.690836][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.697636][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.704255][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.710998][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.717859][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.724377][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.730946][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.737620][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.744225][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.750889][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.759061][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.767304][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.775075][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.781734][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.788446][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.795087][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.802725][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.809528][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.816317][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.822827][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.829647][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.836211][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.842850][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.849406][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.856085][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.862758][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.869324][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.877011][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.883802][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.890365][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.896924][ C0] vcan0: j1939_tp_rxtimer: 0x000000001e78156f: abort rx timeout. Force session deactivation [ 3013.912755][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.919558][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.926125][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.933366][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.939933][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.947043][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.953864][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.961461][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.968166][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.974814][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.982310][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.989628][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3013.997277][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.003778][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.010333][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.016894][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.024174][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.031113][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.038814][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.046649][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.053162][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.059901][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.067011][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.074021][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.081491][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.088190][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.095163][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.102203][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.109803][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.116757][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.123499][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.130506][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.137739][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.144688][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.151786][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.158534][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.165038][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.171602][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.178162][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.186026][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.192541][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.199198][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.206631][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.213452][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.220350][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.227620][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.235250][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.242129][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.248852][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.256447][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.264041][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.270703][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.278299][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.284813][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.291381][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.299064][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.305629][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.312768][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.319694][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.327264][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.333764][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.340320][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.346884][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.353660][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.360747][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.396637][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.403469][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.410314][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.416967][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.418612][T22536] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3014.423469][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.440472][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.447222][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.453731][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.460304][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.467276][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.473879][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.480482][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.488820][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.495580][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.502349][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.509209][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.515934][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.522440][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.529014][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.535851][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.542369][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.548939][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.555510][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.562010][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.568653][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.575256][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.583017][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.589731][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.596293][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.603291][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.610459][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.617314][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.623936][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.630516][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.637703][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.644319][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.650911][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.657574][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.664575][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.671648][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.678920][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.685975][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.693396][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.700675][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.707749][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.714534][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.721698][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.728813][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.735320][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.742252][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.749754][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.756475][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.763382][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.770342][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.777858][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.784366][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.791015][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.797739][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.804735][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.811477][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.818127][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.824642][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.831203][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.837770][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.844825][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a2a18a21: rx timeout, send abort [ 3014.853354][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cac47519: rx timeout, send abort [ 3014.865882][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.872223][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.880751][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3014.890148][T22535] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3014.927493][ T4112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.947184][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.956564][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.354135][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a2a18a21: abort rx timeout. Force session deactivation [ 3015.364648][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cac47519: abort rx timeout. Force session deactivation 04:49:18 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:18 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 04:49:18 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:18 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3015.493642][T22548] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3015.526689][T22545] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:18 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:18 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3015.791371][T22554] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3015.797788][T10410] usb 3-1: new high-speed USB device number 64 using dummy_hcd 04:49:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3015.836338][T22555] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:19 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3015.900866][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:19 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3016.068648][T22560] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:19 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:19 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3016.287843][T10410] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3016.340913][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3016.402783][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3016.456191][T10410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3016.519698][ C1] vcan0: j1939_tp_rxtimer: 0x0000000053f446df: rx timeout, send abort [ 3016.528572][T10410] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3016.572026][T10410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3016.610620][T10410] usb 3-1: config 0 descriptor?? [ 3016.792193][ C0] vcan0: j1939_tp_txtimer: 0x0000000095ac5302: tx aborted with unknown reason: -2 [ 3016.938057][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.028669][ C1] vcan0: j1939_tp_rxtimer: 0x0000000053f446df: abort rx timeout. Force session deactivation [ 3017.030064][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.186308][T10410] usbhid 3-1:0.0: can't add hid device: -71 [ 3017.193013][T10410] usbhid: probe of 3-1:0.0 failed with error -71 [ 3017.237056][T10410] usb 3-1: USB disconnect, device number 64 [ 3017.310657][ C0] vcan0: j1939_tp_rxtimer: 0x0000000095ac5302: abort rx timeout. Force session deactivation 04:49:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:20 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3017.709605][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 3017.789515][T22584] __nla_validate_parse: 3 callbacks suppressed [ 3017.789530][T22584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3017.896910][T22587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3017.982267][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3017.982481][ C0] vcan0: j1939_tp_rxtimer: 0x0000000071694ee6: rx timeout, send abort 04:49:21 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3018.085790][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3018.168903][T14951] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 3018.201324][T22596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3018.232621][T22597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:21 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:21 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3018.499875][ C0] vcan0: j1939_tp_rxtimer: 0x0000000071694ee6: abort rx timeout. Force session deactivation [ 3018.513140][T22602] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3018.574763][T22601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:21 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3018.628163][T14951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3018.666133][T14951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:49:21 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) [ 3018.710074][T14951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3018.730607][T14951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3018.784750][T14951] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3018.833763][T14951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.856683][ C0] vcan0: j1939_tp_rxtimer: 0x00000000361e6875: rx timeout, send abort [ 3018.865830][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b374d326: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3018.866728][ C1] vcan0: j1939_tp_rxtimer: 0x000000007dfa483b: rx timeout, send abort [ 3018.880601][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000008fcf87f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3018.898864][T14951] usb 3-1: config 0 descriptor?? [ 3018.903357][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bac25954: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3018.925356][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3018.933957][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3018.940551][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3018.947967][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3018.955277][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3018.962658][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3018.970453][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3018.979011][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3018.985685][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3018.994150][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.000970][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.008257][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.014751][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.022058][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.028620][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.036047][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.042674][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.050156][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.056726][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.065093][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.072843][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.080249][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.086812][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.094055][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.100764][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.108485][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.115095][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.123582][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.130152][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.137447][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.144426][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.151877][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.159752][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.167211][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.173714][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.181178][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.187744][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.196162][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.203596][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.212276][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.218979][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.226419][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.232952][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.240452][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.247037][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.254427][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.261136][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.268426][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.275083][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.282736][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.289316][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.296825][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.303324][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.311646][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.319119][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.327094][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.333600][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.341129][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.348529][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.355826][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.362646][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.365420][ C0] vcan0: j1939_tp_rxtimer: 0x00000000361e6875: abort rx timeout. Force session deactivation [ 3019.370025][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.386778][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.394183][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.401530][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.409759][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.417103][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.424574][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.431237][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.438528][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.445033][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.452335][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.458915][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.466393][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.473560][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.481032][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.487612][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.495905][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.503109][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.510591][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.517168][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.524407][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.531140][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.538533][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.545046][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.552357][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.558949][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.566317][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.573678][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.581332][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.587994][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.595632][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.602285][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.610329][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.617202][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.624440][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.631254][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.638644][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.645302][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.652696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.659268][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.666895][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.673661][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.681343][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.687956][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.695567][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.702071][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.709362][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.715933][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.723159][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.729825][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.737141][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.744513][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.752356][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.760366][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.767669][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.774353][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.781759][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.788456][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.795977][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.802756][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.810102][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.816792][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.824105][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.831953][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.839300][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.845971][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.853315][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.860487][ C1] vcan0: j1939_tp_rxtimer: 0x000000007dfa483b: abort rx timeout. Force session deactivation [ 3019.875719][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.886335][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.892938][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.900244][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.906818][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.914046][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.921825][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.929254][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.937166][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.945978][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.952487][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.959967][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.966632][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.974009][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.980708][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3019.988259][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3019.995037][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.003050][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.010943][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.018957][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.026668][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.034032][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.040601][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.048118][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.055261][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.063621][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.070267][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.078505][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.085172][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.092992][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.099590][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.107210][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.113722][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.121039][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.127770][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.136320][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.142966][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.150502][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.157077][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.164408][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.170992][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.178585][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.186249][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.193952][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.200632][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.207923][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.214920][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.222215][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.228776][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.236131][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.242999][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.250293][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.257144][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.264372][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.271330][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.278666][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.286726][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.294624][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.301835][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.309135][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.315792][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.323358][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.330039][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.337511][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.344477][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.351785][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.358343][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.366306][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.373077][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.380390][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.387052][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.394627][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.401218][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.408512][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.415022][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.422441][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.429134][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.436801][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.443305][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.450608][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.458416][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.465739][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.472239][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.479906][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.486771][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.494032][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.500730][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.508295][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.514933][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.522236][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.528978][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.536293][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.543106][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.550575][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.557155][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.564625][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.571352][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.578772][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.585379][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.592827][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.599411][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.607027][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.614835][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.622606][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.630527][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.638194][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.644782][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.653290][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.661266][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.668751][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.675256][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.682707][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.689422][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.696836][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.705180][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.713664][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.721463][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.728850][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.735350][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.742657][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.749318][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.757032][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.763670][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.770977][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.777697][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.785016][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.791672][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.799129][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.808913][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.847763][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.855334][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.861904][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.869577][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.877315][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.884556][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.891607][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.900155][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.906973][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.915830][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.922586][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.930249][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.936811][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.944169][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.952038][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.959333][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.967162][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.974487][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.981941][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3020.990109][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3020.997525][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.004890][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.013008][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.020609][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.027179][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.034586][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.041340][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.048723][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.055400][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.062891][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.069464][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.076765][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.084340][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.091918][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.099204][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.106505][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.107457][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3021.113093][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.130096][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.136680][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.144000][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.150656][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.157942][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.164816][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.172423][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.179020][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.186328][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.192844][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.200318][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.207229][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.215707][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.222214][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.230132][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.237427][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.244742][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.251312][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.258626][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.265741][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.272979][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.279542][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.286842][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.294414][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.301723][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.308592][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.316153][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.322669][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.329990][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.336666][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.344945][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.352842][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.360645][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.367240][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.374471][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.381054][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.389770][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.396358][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.404780][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.411364][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.418660][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.426293][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.434774][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.441360][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.449614][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.456197][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.463435][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.470017][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.477484][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.484004][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.491484][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.498270][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.505568][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.512179][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.519706][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.526755][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.535421][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.542907][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.550355][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.557080][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.565618][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.573517][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.580839][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.587411][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.594642][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.601319][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.608615][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.616379][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.623709][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.630458][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.637897][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.644652][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.651955][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.658735][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.666139][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.672812][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.680386][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.687485][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.695803][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.702481][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.710952][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.718909][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.726255][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.733772][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.741176][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.749215][ C1] vcan0: j1939_xtp_rx_dat_one: 0x00000000b5c63d4d: last 00 [ 3021.756891][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 3021.765345][T14951] usb 3-1: can't set config #0, error -71 [ 3021.788006][T14951] usb 3-1: USB disconnect, device number 65 [ 3021.816366][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3022.856954][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:27 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:27 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:27 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) 04:49:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) [ 3023.866976][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 3023.898222][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.962795][T22624] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) 04:49:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) [ 3024.033532][T22626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:27 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:27 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3024.123480][ C0] vcan0: j1939_tp_rxtimer: 0x0000000064980d74: rx timeout, send abort [ 3024.138904][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:27 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) [ 3024.218776][T22639] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3024.247572][T22640] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80005) [ 3024.266555][ T9438] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3024.631819][ C0] vcan0: j1939_tp_rxtimer: 0x0000000064980d74: abort rx timeout. Force session deactivation [ 3024.684057][ T9438] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3024.700798][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3024.725688][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3024.744692][ T9438] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3024.770598][ T9438] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3024.791108][ T9438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.857886][ T9438] usb 3-1: config 0 descriptor?? [ 3024.942268][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.395771][ T9438] usbhid 3-1:0.0: can't add hid device: -71 [ 3025.401863][ T9438] usbhid: probe of 3-1:0.0 failed with error -71 [ 3025.424923][ T9438] usb 3-1: USB disconnect, device number 66 [ 3025.719911][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found 04:49:28 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:28 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:28 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340), 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) 04:49:28 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) [ 3025.831181][T22662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:29 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) 04:49:29 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) 04:49:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3025.944738][T22661] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3025.976416][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.984796][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d1bc07b9: rx timeout, send abort 04:49:29 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:29 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) 04:49:29 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) [ 3026.122984][T22677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3026.217638][T22684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:29 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80005) 04:49:29 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 3026.373000][ T9438] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 3026.425933][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3026.493049][ C1] vcan0: j1939_tp_rxtimer: 0x00000000d1bc07b9: abort rx timeout. Force session deactivation [ 3026.625700][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:29 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 04:49:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 3026.785816][ T9438] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3026.797600][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3026.819871][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3026.865852][ T9438] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3026.909767][ T9438] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3026.921734][ T9438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3026.957946][ T9438] usb 3-1: config 0 descriptor?? [ 3027.021927][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.178176][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.526213][ T9438] usbhid 3-1:0.0: can't add hid device: -71 [ 3027.532278][ T9438] usbhid: probe of 3-1:0.0 failed with error -71 [ 3027.550186][ T9438] usb 3-1: USB disconnect, device number 67 04:49:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:31 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 04:49:31 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:31 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 04:49:31 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 3028.014939][T22729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 04:49:31 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r4}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 3028.056949][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:31 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:31 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:31 executing program 5: r0 = socket(0x0, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:31 executing program 3: pipe(0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x0) [ 3028.355749][T14069] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3028.756545][T14069] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3028.785643][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3028.806249][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3028.822586][T14069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3028.841256][T14069] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3028.856042][T14069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.880965][T14069] usb 3-1: config 0 descriptor?? [ 3029.102854][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3029.645789][T14069] usbhid 3-1:0.0: can't add hid device: -71 [ 3029.658114][T14069] usbhid: probe of 3-1:0.0 failed with error -71 [ 3029.677018][T14069] usb 3-1: USB disconnect, device number 68 04:49:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:33 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:33 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 04:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 3030.146088][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.186487][T22793] __nla_validate_parse: 4 callbacks suppressed [ 3030.186499][T22793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3030.225387][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.323765][T22794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3030.369749][T22795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3030.430271][T22792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3030.535837][T14180] usb 3-1: new high-speed USB device number 69 using dummy_hcd 04:49:33 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 3030.896400][T14180] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3030.922787][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3030.970044][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3030.972902][T14180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3031.014079][T14180] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3031.034449][T14180] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3031.047139][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3031.085352][T14180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.123818][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3031.133035][T14180] usb 3-1: config 0 descriptor?? [ 3031.176846][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:34 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3031.228596][T22832] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3031.557155][T22853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3031.580606][T22852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3031.895667][T14180] usbhid 3-1:0.0: can't add hid device: -71 [ 3031.902021][T14180] usbhid: probe of 3-1:0.0 failed with error -71 [ 3031.942005][T14180] usb 3-1: USB disconnect, device number 69 [ 3032.226194][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:35 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000140021010000000000000000020000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYBLOB="080004010000000808000200e0"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 3032.765665][T10410] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3033.126621][T10410] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3033.153714][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3033.204793][T10410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3033.225884][T10410] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3033.249488][T10410] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3033.266101][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3033.292763][T10410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3033.321034][T10410] usb 3-1: config 0 descriptor?? [ 3033.348040][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0891c7fdee7e14e00c5203d4a68ea1b7de750276952c483a1210be5001ff38a42318ef2d8f661"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:36 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e089"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:36 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3034.086036][T10410] usbhid 3-1:0.0: can't add hid device: -71 [ 3034.093760][T10410] usbhid: probe of 3-1:0.0 failed with error -71 [ 3034.135760][T10410] usb 3-1: USB disconnect, device number 70 [ 3034.376904][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e089"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:38 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3034.915864][ T2815] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3034.966598][T14069] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3035.297266][ T2815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.318356][ T2815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3035.336734][T14069] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3035.362296][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.385327][ T2815] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3035.424070][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3035.445850][ T2815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.464010][T14069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3035.482227][ T2815] usb 4-1: config 0 descriptor?? [ 3035.525599][T14069] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3035.534673][T14069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3035.624769][T14069] usb 3-1: config 0 descriptor?? [ 3035.645782][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0891c7fdee7e14e00c5203d4a68ea1b7de750276952c483a1210be5001ff38a42318ef2d8f661"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:39 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e089"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 3035.885201][T23019] __nla_validate_parse: 22 callbacks suppressed [ 3035.885214][T23019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3035.961868][T23020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3035.993538][T23021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3036.045327][T23022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3036.070496][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3036.086022][ T2815] usbhid 4-1:0.0: can't add hid device: -71 [ 3036.092093][ T2815] usbhid: probe of 4-1:0.0 failed with error -71 04:49:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3036.146284][ T2815] usb 4-1: USB disconnect, device number 43 04:49:39 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3036.215921][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.306095][ T9438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.385725][T14069] usbhid 3-1:0.0: can't add hid device: -71 [ 3036.391848][T14069] usbhid: probe of 3-1:0.0 failed with error -71 [ 3036.419968][T14069] usb 3-1: USB disconnect, device number 71 04:49:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3036.705301][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3036.917746][T23050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3036.997315][T23051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3037.035661][T10410] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3037.129368][T23052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3037.179913][T23055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3037.297001][T23056] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3037.315940][ T9438] usb 3-1: new high-speed USB device number 72 using dummy_hcd 04:49:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r4, @ANYBLOB="080004010000000808000200e0891c7fdee7e14e00c5203d4a68ea1b7de750276952c483a1210be5001ff38a42318ef2d8f661"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 04:49:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3037.412010][T10410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3037.434318][T10410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3037.486056][T10410] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3037.529153][T10410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.582362][T10410] usb 4-1: config 0 descriptor?? 04:49:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3037.696227][ T9438] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3037.714084][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3037.736130][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3037.747043][ T9438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3037.778045][ T9438] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3037.805662][T14069] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3037.845924][ T9438] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 04:49:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:41 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3037.896024][ T9438] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.942044][ T9438] usb 3-1: config 0 descriptor?? 04:49:41 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3038.196456][T14069] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3038.205893][T10410] usbhid 4-1:0.0: can't add hid device: -71 [ 3038.213423][T10410] usbhid: probe of 4-1:0.0 failed with error -71 [ 3038.224995][T14069] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3038.269201][T14069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3038.276805][T10410] usb 4-1: USB disconnect, device number 44 [ 3038.325786][T14069] usb 6-1: config 0 descriptor?? [ 3038.705954][ T9438] usbhid 3-1:0.0: can't add hid device: -71 [ 3038.712060][ T9438] usbhid: probe of 3-1:0.0 failed with error -71 04:49:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") [ 3038.752590][ T9438] usb 3-1: USB disconnect, device number 72 [ 3038.796102][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3038.863700][T14069] keytouch 0003:0926:3333.0315: fixing up Keytouch IEC report descriptor [ 3038.902325][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0315/input/input784 [ 3039.024945][T14069] keytouch 0003:0926:3333.0315: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 3039.111703][T14180] usb 6-1: USB disconnect, device number 102 [ 3039.135814][T14181] usb 4-1: new high-speed USB device number 45 using dummy_hcd 04:49:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3039.336059][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.496673][T14181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3039.524744][T14181] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3039.555057][T14181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3039.574332][T14181] usb 4-1: config 0 descriptor?? [ 3039.645717][T14069] usb 3-1: new high-speed USB device number 73 using dummy_hcd 04:49:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:42 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:42 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001640)={0x5d1b}) [ 3039.815975][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:43 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3040.016521][T14069] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3040.034366][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3040.065370][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3040.095621][T19969] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3040.127913][T14181] keytouch 0003:0926:3333.0316: fixing up Keytouch IEC report descriptor [ 3040.161713][T14181] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0316/input/input785 04:49:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:43 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3040.166738][T14069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3040.267573][T14181] keytouch 0003:0926:3333.0316: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 3040.268964][T14069] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3040.335640][T10410] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3040.382248][T14069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.437185][T14069] usb 3-1: config 0 descriptor?? 04:49:43 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3040.486442][T19969] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3040.486485][T19969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 04:49:43 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3040.622771][T19969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3040.693838][T19969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3040.815873][T19969] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3040.824954][T19969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.856358][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.888590][T14181] usb 4-1: USB disconnect, device number 45 [ 3040.902053][T19969] usb 6-1: config 0 descriptor?? [ 3041.206027][T14069] usbhid 3-1:0.0: can't add hid device: -71 [ 3041.212096][T14069] usbhid: probe of 3-1:0.0 failed with error -71 [ 3041.256640][T14069] usb 3-1: USB disconnect, device number 73 04:49:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") [ 3041.415893][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3041.444474][T10410] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3041.466436][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3041.499485][T10410] usb 2-1: config 0 descriptor?? 04:49:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3041.765857][T19969] usbhid 6-1:0.0: can't add hid device: -71 [ 3041.771953][T19969] usbhid: probe of 6-1:0.0 failed with error -71 [ 3041.809357][T14181] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3041.824832][T19969] usb 6-1: USB disconnect, device number 103 [ 3041.901419][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.135742][T14069] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3042.137028][T10410] keytouch 0003:0926:3333.0317: fixing up Keytouch IEC report descriptor [ 3042.195737][T14181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3042.225982][T10410] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0317/input/input786 04:49:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001640)={0x5d1b}) 04:49:45 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:45 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3042.245597][T14181] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3042.254663][T14181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.316681][T14181] usb 4-1: config 0 descriptor?? [ 3042.342204][T23342] __nla_validate_parse: 33 callbacks suppressed [ 3042.342217][T23342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3042.379020][T10410] keytouch 0003:0926:3333.0317: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3042.432443][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.509612][T23343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3042.527970][T14069] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3042.562044][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3042.616881][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3042.644279][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3042.655919][T14069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3042.706348][T14069] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3042.775938][T14069] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3042.823263][T14069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.867189][T14181] keytouch 0003:0926:3333.0318: fixing up Keytouch IEC report descriptor [ 3042.888029][T14069] usb 3-1: config 0 descriptor?? [ 3042.925135][T14181] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0318/input/input787 [ 3042.982624][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3043.015653][ T2815] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3043.051674][T14181] keytouch 0003:0926:3333.0318: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 3043.426401][ T2815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3043.446842][ T2815] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3043.482115][ T2815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.496551][T14181] usb 4-1: USB disconnect, device number 46 [ 3043.530166][ T2815] usb 6-1: config 0 descriptor?? [ 3043.646585][T14069] usbhid 3-1:0.0: can't add hid device: -71 [ 3043.657984][T14069] usbhid: probe of 3-1:0.0 failed with error -71 [ 3043.705740][T14069] usb 3-1: USB disconnect, device number 74 [ 3044.061637][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3044.081901][ T2815] keytouch 0003:0926:3333.0319: fixing up Keytouch IEC report descriptor [ 3044.128973][ T2815] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0319/input/input788 [ 3044.245774][ T2815] keytouch 0003:0926:3333.0319: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 3044.536163][ T2815] usb 2-1: USB disconnect, device number 100 [ 3044.761674][T14181] usb 6-1: USB disconnect, device number 104 04:49:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:48 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001640)={0x5d1b}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 04:49:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001640)={0x5d1b}) [ 3044.908624][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3045.014273][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3045.051508][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3045.087720][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3045.098710][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3045.108631][T15556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3045.121029][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3045.137867][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3045.197730][T23495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3045.205766][T10410] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3045.207490][ T2815] usb 3-1: new high-speed USB device number 75 using dummy_hcd 04:49:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140), 0x0) [ 3045.367967][T23502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3045.470396][T23512] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 3045.496907][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 3045.566545][T10410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3045.595637][T10410] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3045.604753][T10410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.657414][ T2815] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3045.676661][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3045.692704][T10410] usb 4-1: config 0 descriptor?? [ 3045.696078][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3045.711344][T23529] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 3045.742243][ T2815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 04:49:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3045.765010][T23529] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 04:49:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3045.839151][ T2815] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3045.878572][ T2815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.920489][ T2815] usb 3-1: config 0 descriptor?? [ 3046.222029][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.277451][T10410] keytouch 0003:0926:3333.031A: fixing up Keytouch IEC report descriptor [ 3046.314956][T10410] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.031A/input/input789 [ 3046.415730][T25110] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3046.450783][T10410] keytouch 0003:0926:3333.031A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 3046.645881][ T2815] usbhid 3-1:0.0: can't add hid device: -71 [ 3046.652600][ T2815] usbhid: probe of 3-1:0.0 failed with error -71 [ 3046.717720][ T2815] usb 3-1: USB disconnect, device number 75 [ 3046.940111][T20571] usb 4-1: USB disconnect, device number 47 [ 3047.405835][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3047.418789][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3047.466050][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 04:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 04:49:50 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x18, &(0x7f0000001700)=ANY=[@ANYBLOB="00aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3047.506811][T25110] usb 2-1: config 0 descriptor?? [ 3047.584984][T23608] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 3047.603913][T23608] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 3047.737929][T20571] net_ratelimit: 1 callbacks suppressed [ 3047.737939][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.895748][ T2815] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3048.027169][T25110] keytouch 0003:0926:3333.031B: fixing up Keytouch IEC report descriptor [ 3048.039474][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.031B/input/input790 [ 3048.126758][T25110] keytouch 0003:0926:3333.031B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3048.285781][ T2815] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3048.305612][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3048.326619][ T2815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3048.351205][ T2815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3048.382570][ T2815] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3048.394406][ T2815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.413598][ T2815] usb 3-1: config 0 descriptor?? [ 3048.546910][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3048.776428][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3048.815932][T14951] usb 2-1: USB disconnect, device number 101 [ 3049.185730][ T2815] usbhid 3-1:0.0: can't add hid device: -71 [ 3049.191864][ T2815] usbhid: probe of 3-1:0.0 failed with error -71 [ 3049.212692][ T2815] usb 3-1: USB disconnect, device number 76 04:49:52 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 04:49:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:52 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 04:49:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001640)={0x5d1b}) [ 3049.391153][T23662] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 3049.403162][T23664] __nla_validate_parse: 8 callbacks suppressed [ 3049.403175][T23664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3049.484120][T23665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3049.533384][T23670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:49:52 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3049.684939][T23687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:49:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3049.753354][T23690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3049.812162][T23693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3049.823589][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:53 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:53 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3049.865656][T20571] usb 2-1: new high-speed USB device number 102 using dummy_hcd 04:49:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3049.943298][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) [ 3049.990318][T23707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3050.025276][T23709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3050.255968][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3050.267765][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3050.278243][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.293935][T20571] usb 2-1: config 0 descriptor?? [ 3050.807167][T20571] keytouch 0003:0926:3333.031C: fixing up Keytouch IEC report descriptor [ 3050.818483][T20571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.031C/input/input791 [ 3050.856642][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.921263][T20571] keytouch 0003:0926:3333.031C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3050.943322][ T1948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.968497][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.978175][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3051.570487][T14180] usb 2-1: USB disconnect, device number 102 [ 3051.586637][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x600004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 3052.055925][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:49:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3052.129046][T23774] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:55 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:49:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:55 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3053.095865][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3053.145786][T14180] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3053.505755][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3053.516738][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3053.532852][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.548992][T14180] usb 2-1: config 0 descriptor?? [ 3054.026694][T14180] keytouch 0003:0926:3333.031D: fixing up Keytouch IEC report descriptor [ 3054.065755][T14180] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.031D/input/input792 [ 3054.136532][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.161524][T14180] keytouch 0003:0926:3333.031D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3054.610835][T14069] usb 2-1: USB disconnect, device number 103 [ 3054.627807][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:49:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:58 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:49:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3055.175842][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3055.204823][T23892] __nla_validate_parse: 8 callbacks suppressed [ 3055.204837][T23892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3055.239044][T23895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 04:49:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:58 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3055.417708][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:49:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 3055.475396][T23908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3055.607222][T23910] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:49:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:49:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 3055.877326][T23925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3056.225832][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3056.355714][T25110] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3056.715757][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3056.715804][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3056.741412][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.756406][T25110] usb 2-1: config 0 descriptor?? [ 3057.236972][T25110] keytouch 0003:0926:3333.031E: fixing up Keytouch IEC report descriptor [ 3057.255890][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3057.264618][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.031E/input/input793 [ 3057.352690][T25110] keytouch 0003:0926:3333.031E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3057.440992][T14180] usb 2-1: USB disconnect, device number 104 [ 3057.655855][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:01 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 04:50:01 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:50:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3058.125802][T23980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) [ 3058.296064][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3058.303531][T23982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:01 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:01 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 3058.487033][T24003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3058.657486][T24012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:01 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3058.818740][T24027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:02 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3058.975783][T14951] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3059.344242][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3059.665879][T14951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3059.676890][T14951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3059.686669][T14951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3059.700789][T14951] usb 2-1: config 0 descriptor?? [ 3060.197649][T14951] keytouch 0003:0926:3333.031F: fixing up Keytouch IEC report descriptor [ 3060.209572][T14951] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.031F/input/input794 [ 3060.316929][T14951] keytouch 0003:0926:3333.031F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3060.377586][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3060.472037][ T2815] usb 2-1: USB disconnect, device number 105 [ 3060.695829][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:04 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:04 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 04:50:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3061.046425][T24090] __nla_validate_parse: 3 callbacks suppressed [ 3061.046440][T24090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3061.191570][T24094] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3061.265119][T24095] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:04 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:04 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3061.417167][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3061.453356][T24111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3061.490020][T24111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3061.525472][T24121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:04 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3061.636592][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:04 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3061.786102][T24128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3061.881109][T24129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) [ 3061.924260][T24135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:05 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3062.462406][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3062.482393][ T2815] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3062.850975][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3062.862036][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3062.882411][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3062.894321][ T2815] usb 2-1: config 0 descriptor?? [ 3063.387118][ T2815] keytouch 0003:0926:3333.0320: fixing up Keytouch IEC report descriptor [ 3063.398304][ T2815] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0320/input/input795 [ 3063.496143][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3063.500402][ T2815] keytouch 0003:0926:3333.0320: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3063.599706][T14951] usb 2-1: USB disconnect, device number 106 [ 3063.735921][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:07 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:07 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) 04:50:07 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:07 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3064.536184][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:07 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:07 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:08 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3065.015885][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) 04:50:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3065.580268][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3065.743716][T14180] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3066.165767][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3066.176714][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3066.195914][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3066.219085][T14180] usb 2-1: config 0 descriptor?? [ 3066.617492][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3066.776054][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3067.655974][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:11 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:11 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:11 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) [ 3068.493275][T24289] __nla_validate_parse: 21 callbacks suppressed [ 3068.493290][T24289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3068.537672][T14180] usbhid 2-1:0.0: can't add hid device: -71 [ 3068.544264][T14180] usbhid: probe of 2-1:0.0 failed with error -71 [ 3068.573573][T14180] usb 2-1: USB disconnect, device number 107 04:50:11 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3068.610178][T24290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3068.669217][T24293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.692989][T24296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3068.706515][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:11 executing program 3: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:11 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3068.848879][T24318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.916460][T24324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3069.385764][T14180] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3069.746074][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3069.770897][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.781887][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3069.797558][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.808331][T14180] usb 2-1: config 0 descriptor?? [ 3069.818888][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.787486][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3071.816976][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) [ 3072.146307][T24345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3072.165939][T14180] usbhid 2-1:0.0: can't add hid device: -71 [ 3072.174032][T14180] usbhid: probe of 2-1:0.0 failed with error -71 [ 3072.222079][T24348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3072.252742][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3072.269051][T14180] usb 2-1: USB disconnect, device number 108 04:50:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3072.360076][T24355] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005000000000000000000"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014000500"/42], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3072.855916][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3072.864104][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:16 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3073.645701][ T2815] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3073.907490][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.005759][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3074.016749][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3074.026438][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.038653][ T2815] usb 2-1: config 0 descriptor?? [ 3074.615879][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.945912][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.895904][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.986051][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:19 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:19 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x600004) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) [ 3076.423933][T24420] __nla_validate_parse: 8 callbacks suppressed [ 3076.423947][T24420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3076.446567][ T2815] usbhid 2-1:0.0: can't add hid device: -71 [ 3076.452697][ T2815] usbhid: probe of 2-1:0.0 failed with error -71 [ 3076.548925][ T2815] usb 2-1: USB disconnect, device number 109 [ 3076.638527][T24419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3077.001583][T24442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3077.016034][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3077.091044][T24441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:20 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3077.418119][T24459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3077.517344][T24458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3077.802902][T24475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3077.907606][T24477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3078.055899][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3078.515743][ T2815] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3078.896257][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3078.907210][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3078.919441][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.930080][ T2815] usb 2-1: config 0 descriptor?? [ 3078.937021][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3079.095845][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3080.137442][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.175843][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:24 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:24 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:24 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3081.300282][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3081.337521][ T2815] usbhid 2-1:0.0: can't add hid device: -71 [ 3081.339340][T24502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3081.343591][ T2815] usbhid: probe of 2-1:0.0 failed with error -71 04:50:24 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:24 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:24 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3081.465088][ T2815] usb 2-1: USB disconnect, device number 110 [ 3081.563319][T24522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3081.688881][T24531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:25 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:25 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3081.975892][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.997966][T24542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3082.062862][T24544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3082.216073][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3082.705983][T20571] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3083.116526][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3083.127552][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3083.139848][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.152588][T20571] usb 2-1: config 0 descriptor?? [ 3083.257548][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3084.225840][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3084.295980][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3085.035236][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:28 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:28 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3085.335821][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3085.348588][T20571] usbhid 2-1:0.0: can't add hid device: -71 [ 3085.367446][T24571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3085.377132][T20571] usbhid: probe of 2-1:0.0 failed with error -71 [ 3085.422563][T20571] usb 2-1: USB disconnect, device number 111 [ 3085.506799][T24574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:28 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3085.596280][T24577] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3085.623807][T24577] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3085.778496][T24593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3085.976019][T24600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:29 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:29 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3086.376641][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3086.925769][ T2815] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3087.285871][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3087.296882][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3087.312356][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.330557][ T2815] usb 2-1: config 0 descriptor?? [ 3087.416161][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3088.055837][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3088.465871][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3089.495902][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:32 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:32 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:32 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3089.711270][T24641] __nla_validate_parse: 8 callbacks suppressed [ 3089.711286][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3089.736322][ T2815] usbhid 2-1:0.0: can't add hid device: -71 [ 3089.743991][ T2815] usbhid: probe of 2-1:0.0 failed with error -71 [ 3089.780703][T24646] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3089.825997][ T2815] usb 2-1: USB disconnect, device number 112 [ 3089.847054][T24647] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3089.858307][T24653] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3089.892123][T24647] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3089.905944][T24653] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:33 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3090.243132][T24668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3090.334749][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3090.451696][T24671] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3090.461998][T24677] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3090.536576][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3091.095880][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:34 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:34 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:34 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3091.575999][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3092.616696][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:35 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:35 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:36 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:36 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3093.657067][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3093.819054][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:37 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3094.136110][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:37 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3094.697648][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:38 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:38 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3095.129493][T24843] __nla_validate_parse: 42 callbacks suppressed [ 3095.129507][T24843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3095.199748][T24844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.239462][T24846] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.249705][T24853] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.265502][T24853] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:38 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3095.322819][T24846] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:38 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3095.435542][T24868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.538186][T24871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.538231][T24870] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3095.606027][T24876] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.736081][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:39 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:39 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3096.775993][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3097.185727][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:40 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:40 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:40 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:40 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00000800010075"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3097.823622][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.233841][T14951] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3098.425718][T14951] usb 2-1: device descriptor read/64, error 18 [ 3098.696259][T14951] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3098.855824][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3098.885722][T14951] usb 2-1: device descriptor read/64, error 18 [ 3099.008548][T14951] usb usb2-port1: attempt power cycle [ 3099.715705][T14951] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3099.805793][T14951] usb 2-1: Invalid ep0 maxpacket: 0 [ 3099.896012][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3099.955786][T14951] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3100.045881][T14951] usb 2-1: Invalid ep0 maxpacket: 0 [ 3100.051244][T14951] usb usb2-port1: unable to enumerate USB device [ 3100.218111][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:44 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00000800010075"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:44 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c00020014"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3100.902449][T24996] __nla_validate_parse: 32 callbacks suppressed [ 3100.902464][T24996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3100.936164][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3100.986253][T24997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.066311][T25001] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3101.076391][T25004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.098819][T25004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:50:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3101.209182][T25001] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:44 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002001400"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:50:44 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff00000800010075"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3101.374401][T25020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 3101.472037][T25024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.497269][T25025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3101.558505][T25024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.976062][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3102.035847][ T2815] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3102.245746][ T2815] usb 2-1: device descriptor read/64, error 18 [ 3102.515757][ T2815] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3102.705810][ T2815] usb 2-1: device descriptor read/64, error 18 [ 3102.829334][ T2815] usb usb2-port1: attempt power cycle [ 3103.026205][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3103.255863][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3103.415940][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3103.535750][ T2815] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 3103.626533][ T2815] usb 2-1: Invalid ep0 maxpacket: 0 [ 3103.775717][ T2815] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3103.865944][ T2815] usb 2-1: Invalid ep0 maxpacket: 0 [ 3103.871435][ T2815] usb usb2-port1: unable to enumerate USB device [ 3104.057576][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 04:50:47 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002001400"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 04:50:48 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c0002001400"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000100)={0x9, 0x6, 0xd75a, 0x94bd}, 0x8) 04:50:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3105.096045][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.585846][T14951] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3105.785714][T14951] usb 2-1: device descriptor read/64, error 18 [ 3106.056626][T14951] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3106.135895][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3106.245752][T14951] usb 2-1: device descriptor read/64, error 18 [ 3106.306108][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3106.366007][T14951] usb usb2-port1: attempt power cycle [ 3107.075807][T14951] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3107.165878][T14951] usb 2-1: Invalid ep0 maxpacket: 0 [ 3107.185802][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.315723][T14951] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3107.405813][T14951] usb 2-1: Invalid ep0 maxpacket: 0 [ 3107.411211][T14951] usb usb2-port1: unable to enumerate USB device [ 3108.215915][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:51 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x0, 0x9}) 04:50:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:51 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:51 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff0000080001007533"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3108.334220][T25102] __nla_validate_parse: 14 callbacks suppressed [ 3108.334233][T25102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0189436, &(0x7f0000000040)) [ 3108.415284][T25103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3108.449989][T25107] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3108.460952][T25109] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3108.475216][T25109] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3108.512813][T25107] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:51 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:51 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3108.695179][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3108.821556][T25127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3108.910496][T25128] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3108.910866][T25131] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3109.235791][ T2815] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3109.256018][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3109.336817][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3109.625906][ T2815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3109.638788][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3109.653774][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.672137][ T2815] usb 2-1: config 0 descriptor?? [ 3109.718666][ T2815] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3110.306050][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3111.335953][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x0, 0x0, 0x0, 0x128, 0x208, 0x210, 0x210, 0x208, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48], 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket2={{0x28, 'socket\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 04:50:55 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:50:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3111.913126][T14951] usb 2-1: USB disconnect, device number 125 04:50:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:50:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/232) dup3(r0, r5, 0x0) 04:50:55 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:55 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:50:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 3112.377469][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3112.385804][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3112.855844][T14951] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3113.016015][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3113.256531][T14951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3113.269517][T14951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3113.285352][T14951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.303173][T14951] usb 2-1: config 0 descriptor?? [ 3113.358425][T14951] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3113.415977][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3114.457162][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.425939][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3115.495873][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:50:58 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:58 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 04:50:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:50:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000004640)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)='F', 0x1}], 0x1}}], 0x1, 0x0) [ 3115.564791][T20571] usb 2-1: USB disconnect, device number 126 04:50:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 3115.652914][T25235] __nla_validate_parse: 12 callbacks suppressed [ 3115.652928][T25235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3115.717779][T25234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3115.784637][T25239] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3115.813147][T25239] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:59 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(r0) 04:50:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:59 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:50:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000007880)=[{&(0x7f0000003e40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x300, 0x0) [ 3115.971348][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:50:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3116.040884][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:50:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:50:59 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3116.107050][T25269] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3116.130491][T25269] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3116.258465][T25281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.293428][T14951] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3116.536075][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3116.656450][T14951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3116.669421][T14951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3116.684536][T14951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.699572][T14951] usb 2-1: config 0 descriptor?? [ 3116.743206][T14951] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3117.576047][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3118.456043][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3118.620942][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:02 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000080)) 04:51:02 executing program 2: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6800) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) [ 3118.861751][T25110] usb 2-1: USB disconnect, device number 127 [ 3118.926846][T25305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, 0x0) 04:51:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:02 executing program 2: r0 = timerfd_create(0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40085400, 0x0) 04:51:02 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(0xffffffffffffffff, &(0x7f00000000c0)="641571bedf6a14afa42b3e1e2b841464", 0x10, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2}, 0xb}, 0x0) 04:51:02 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3119.585836][T14951] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3119.655932][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3119.945906][T14951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3119.958391][T14951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3119.970818][T14951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3119.989146][T14951] usb 2-1: config 0 descriptor?? [ 3120.028505][T14951] usbhid 2-1:0.0: can't add hid device: -22 [ 3120.034570][T14951] usbhid: probe of 2-1:0.0 failed with error -22 [ 3120.695996][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.504834][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3121.736800][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1275, 0x0) 04:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:05 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, 0x0) 04:51:05 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3122.322508][T20571] usb 2-1: USB disconnect, device number 2 [ 3122.404320][T25366] __nla_validate_parse: 5 callbacks suppressed [ 3122.404333][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:05 executing program 2: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000001e80)) 04:51:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0xf00) 04:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3122.500235][T25367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:05 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0xf0ff7f}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 04:51:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x80089203) [ 3122.617270][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3122.776732][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3123.055774][T20571] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3123.416496][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3123.427495][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3123.442677][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3123.461932][T20571] usb 2-1: config 0 descriptor?? [ 3123.508588][T20571] usbhid 2-1:0.0: can't add hid device: -22 [ 3123.514653][T20571] usbhid: probe of 2-1:0.0 failed with error -22 [ 3123.815863][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3124.548039][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3124.856021][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:08 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:08 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:08 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000120001e7ff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053389fca8de1847c599b23eb579c"], 0x4c}}, 0x0) 04:51:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3125.793831][T20571] usb 2-1: USB disconnect, device number 3 [ 3125.859456][T25414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3125.895967][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3125.923136][T25415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:09 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000120001e7ff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053389fca8de1847c599b23eb579c"], 0x4c}}, 0x0) 04:51:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:09 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:09 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3126.110750][T25437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3126.166719][T25439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3126.605872][T20571] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3126.935881][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.005898][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.016840][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3127.035907][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3127.054653][T20571] usb 2-1: config 0 descriptor?? [ 3127.098775][T20571] usbhid 2-1:0.0: can't add hid device: -22 [ 3127.104834][T20571] usbhid: probe of 2-1:0.0 failed with error -22 [ 3127.576154][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3127.975964][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3129.022944][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x300}, 0x0) 04:51:12 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:12 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:12 executing program 2: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3129.315354][T14069] usb 2-1: USB disconnect, device number 4 04:51:12 executing program 2: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3129.392469][T25475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:12 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff08) [ 3129.473468][T25478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:12 executing program 2: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3129.524411][T25479] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3129.557913][T25479] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:12 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:12 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:12 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3129.661509][T25499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3129.697908][T25499] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3129.704066][T25502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3129.709643][T25499] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3130.056029][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3130.105842][T14951] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3130.466276][T14951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3130.481936][T14951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3130.494970][T14951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3130.504495][T14951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.521629][T14951] usb 2-1: config 0 descriptor?? [ 3130.617240][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3131.007178][T14951] keytouch 0003:0926:3333.0321: fixing up Keytouch IEC report descriptor [ 3131.019744][T14951] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0321/input/input796 [ 3131.095877][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3131.113478][T14951] keytouch 0003:0926:3333.0321: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3131.262511][ T2815] usb 2-1: USB disconnect, device number 5 04:51:14 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:14 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:14 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x227e, &(0x7f00000021c0)=ANY=[@ANYBLOB='\x00']) 04:51:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:15 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3131.856735][T25559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0xfffffdef}}, 0x0) 04:51:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3131.938579][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:15 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:15 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:15 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:15 executing program 3: 04:51:15 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) [ 3132.136717][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:15 executing program 3: [ 3132.216014][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3132.695807][T14069] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3133.056567][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3133.067597][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3133.080763][T14069] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3133.090303][T14069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.106075][T14069] usb 2-1: config 0 descriptor?? [ 3133.186063][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.577321][T14069] keytouch 0003:0926:3333.0322: fixing up Keytouch IEC report descriptor [ 3133.607163][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0322/input/input797 [ 3133.656041][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3133.711245][T14069] keytouch 0003:0926:3333.0322: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3133.879582][T14069] usb 2-1: USB disconnect, device number 6 [ 3134.215938][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:17 executing program 3: 04:51:17 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:17 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:17 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2285, &(0x7f00000021c0)=ANY=[]) 04:51:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) [ 3134.508870][T25650] __nla_validate_parse: 10 callbacks suppressed [ 3134.508884][T25650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.551011][T25651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3134.584927][T25650] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) 04:51:17 executing program 3: 04:51:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, 0x0) [ 3134.591633][T25662] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3134.596425][T25650] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.623978][T25662] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:17 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:17 executing program 3: 04:51:17 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3134.793140][T25669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.840392][T25669] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.862303][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3134.867437][T25669] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.256020][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3135.365788][ T2815] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3135.785916][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3135.796897][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3135.816094][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3135.825129][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3135.844015][ T2815] usb 2-1: config 0 descriptor?? [ 3136.296038][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3136.351632][ T2815] keytouch 0003:0926:3333.0323: fixing up Keytouch IEC report descriptor [ 3136.363837][ T2815] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0323/input/input798 [ 3136.472570][ T2815] keytouch 0003:0926:3333.0323: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3136.647102][ T2815] usb 2-1: USB disconnect, device number 7 [ 3136.699324][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, 0x0) 04:51:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:51:20 executing program 3: 04:51:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:20 executing program 3: 04:51:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:51:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, 0x0) 04:51:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3137.335986][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:20 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:20 executing program 3: 04:51:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:51:20 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:20 executing program 3: 04:51:20 executing program 2: 04:51:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 3138.015807][T20571] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3138.376034][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3138.387189][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3138.402530][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3138.413994][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3138.430034][T20571] usb 2-1: config 0 descriptor?? [ 3139.427959][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3139.736017][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3140.466086][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:23 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:23 executing program 2: 04:51:23 executing program 3: 04:51:23 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 3140.812595][T25793] __nla_validate_parse: 17 callbacks suppressed [ 3140.812608][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3140.825981][T20571] usbhid 2-1:0.0: can't add hid device: -71 04:51:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 04:51:24 executing program 2: 04:51:24 executing program 3: [ 3140.857544][T20571] usbhid: probe of 2-1:0.0 failed with error -71 [ 3140.891491][T20571] usb 2-1: USB disconnect, device number 8 [ 3140.960586][T25792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:24 executing program 2: 04:51:24 executing program 5: 04:51:24 executing program 3: [ 3141.042130][T25794] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3141.042262][T25795] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.069691][T25794] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3141.102207][T25795] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.497335][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3141.546045][T20571] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3141.828530][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3141.916015][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3141.927425][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3141.943738][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.962432][T20571] usb 2-1: config 0 descriptor?? [ 3142.536240][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3142.776101][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3143.576124][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:27 executing program 2: 04:51:27 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:27 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:27 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000dc0)) 04:51:27 executing program 3: fsopen(&(0x7f0000000140)='squashfs\x00', 0x0) 04:51:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) [ 3144.314117][T25833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3144.335983][T20571] usbhid 2-1:0.0: can't add hid device: -71 [ 3144.342480][T20571] usbhid: probe of 2-1:0.0 failed with error -71 04:51:27 executing program 3: getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) 04:51:27 executing program 5: syz_open_dev$vcsn(&(0x7f0000001d80)='/dev/vcs#\x00', 0x0, 0x2) [ 3144.406381][T20571] usb 2-1: USB disconnect, device number 9 04:51:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000009c0)) [ 3144.450997][T25835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3144.537096][T25836] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3144.539662][T25837] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:27 executing program 2: 04:51:27 executing program 3: [ 3144.635975][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3145.040600][ T2815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3145.505960][ T2815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3145.516937][ T2815] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3145.532753][ T2815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3145.546819][ T2815] usb 2-1: config 0 descriptor?? [ 3145.656218][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3145.818524][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3146.706012][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:30 executing program 5: 04:51:30 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/18, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:30 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:30 executing program 2: 04:51:30 executing program 3: [ 3147.736117][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3147.800279][T25876] __nla_validate_parse: 2 callbacks suppressed [ 3147.800293][T25876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:31 executing program 3: 04:51:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:51:31 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) [ 3147.845860][ T2815] usbhid 2-1:0.0: can't add hid device: -71 [ 3147.853405][ T2815] usbhid: probe of 2-1:0.0 failed with error -71 04:51:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0xc8, 0xc8, 0x160, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) [ 3147.907752][ T2815] usb 2-1: USB disconnect, device number 10 [ 3147.913792][T25877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:31 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x48) [ 3148.020965][T25878] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3148.031243][T25879] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:31 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf25030000000500020006000000200001801400020076657468315f6d61637674617000000008000300020000000624560d31362a38d7cd8a77dc988a7b"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4008080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x0) r0 = request_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='{\xcb\xac\x1c\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\'\x00', r0) [ 3148.065535][T25878] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3148.098554][T25879] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3148.515863][T20571] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3148.777677][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3148.862705][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3148.880297][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3148.891334][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3148.906818][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3148.923115][T20571] usb 2-1: config 0 descriptor?? [ 3149.816047][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3150.855969][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000340), 0x10) 04:51:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={0x0, &(0x7f00000009c0)=""/223, 0x0, 0xdf}, 0x20) 04:51:34 executing program 0: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0xc8, 0xc8, 0x160, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 04:51:34 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/vsock\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 04:51:34 executing program 3: getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001ac0)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044054}, 0x4008040) [ 3151.307070][T25925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3151.337667][T20571] usbhid 2-1:0.0: can't add hid device: -71 [ 3151.343745][T20571] usbhid: probe of 2-1:0.0 failed with error -71 04:51:34 executing program 2: io_setup(0x217, &(0x7f0000000140)=0x0) io_getevents(r0, 0x7, 0xbf, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x989680}) [ 3151.387837][T20571] usb 2-1: USB disconnect, device number 11 [ 3151.416112][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3151.460754][T25926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}], 0x1, 0x0) [ 3151.515072][T25927] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3151.527589][T25927] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:34 executing program 5: 04:51:34 executing program 0: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3151.896016][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3151.904141][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3152.035798][T20571] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3152.406573][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.417523][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3152.427082][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.439665][T20571] usb 2-1: config 0 descriptor?? [ 3152.935999][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3153.985993][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:37 executing program 5: 04:51:37 executing program 2: 04:51:37 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:37 executing program 3: 04:51:37 executing program 0: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:38 executing program 2: 04:51:38 executing program 5: [ 3154.845648][T25973] __nla_validate_parse: 1 callbacks suppressed [ 3154.845670][T25973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3154.875858][T20571] usbhid 2-1:0.0: can't add hid device: -71 [ 3154.882090][T20571] usbhid: probe of 2-1:0.0 failed with error -71 04:51:38 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000008c0), 0x0) [ 3154.929131][T20571] usb 2-1: USB disconnect, device number 12 [ 3154.936249][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:38 executing program 2: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) getrandom(&(0x7f0000000100)=""/158, 0xfffffffffffffd4b, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 04:51:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x4e25, @loopback}, 0x80) sendto(r0, &(0x7f0000000140)='D', 0x1, 0x0, 0x0, 0x0) [ 3155.010955][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3155.016313][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:38 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 3155.079843][T25975] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3155.108371][T25975] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3155.245130][T26001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3155.641813][T25110] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3156.020997][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3156.032094][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3156.051339][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3156.068351][T25110] usb 2-1: config 0 descriptor?? [ 3156.075978][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.096024][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3157.978303][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3158.135992][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x4e25, @loopback}, 0x80) sendto(r0, &(0x7f0000000140)="446fee20af83dee5d2af455ee155cd9b3286f3cc537f11dbe1e0f3c6989636b827af7ff6fe854c231b8d1eb00ebc83afe4be9a70f6fd58a92b6e3a5a4a7fe96e44", 0x41, 0x0, 0x0, 0x0) 04:51:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000007180)={0x0, 0x0, 0x0}, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x4e25, @loopback}, 0x80) 04:51:41 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/19, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:41 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 04:51:41 executing program 2: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) getrandom(&(0x7f0000000100)=""/158, 0xfffffffffffffd4b, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 3158.389106][T26023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3158.406054][T25110] usbhid 2-1:0.0: can't add hid device: -71 [ 3158.412122][T25110] usbhid: probe of 2-1:0.0 failed with error -71 [ 3158.448160][T25110] usb 2-1: USB disconnect, device number 13 04:51:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@in={0x2, 0x4e25, @local}, 0x80) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3158.494195][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:41 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332002c000200140005"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 04:51:41 executing program 3: [ 3158.596236][T26037] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3158.627790][T26037] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3158.686065][T26050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:51:41 executing program 4: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:41 executing program 3: 04:51:41 executing program 0: [ 3159.186183][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3159.305888][T25110] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3159.691095][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3159.702275][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3159.718616][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3159.737990][T25110] usb 2-1: config 0 descriptor?? [ 3160.216863][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.037602][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.045989][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.256068][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3161.656317][T27132] kworker/dying (27132) used greatest stack depth: 22144 bytes left 04:51:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:45 executing program 3: 04:51:45 executing program 0: 04:51:45 executing program 4: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:45 executing program 5: 04:51:45 executing program 2: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) getrandom(&(0x7f0000000100)=""/158, 0xfffffffffffffd4b, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 3162.075900][T25110] usbhid 2-1:0.0: can't add hid device: -71 [ 3162.082502][T25110] usbhid: probe of 2-1:0.0 failed with error -71 [ 3162.106533][T26082] __nla_validate_parse: 1 callbacks suppressed [ 3162.106546][T26082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:45 executing program 3: 04:51:45 executing program 5: 04:51:45 executing program 0: [ 3162.141264][T25110] usb 2-1: USB disconnect, device number 14 04:51:45 executing program 3: 04:51:45 executing program 0: 04:51:45 executing program 5: [ 3162.297769][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3162.775857][T25110] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3163.206275][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3163.217238][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3163.235787][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3163.256586][T25110] usb 2-1: config 0 descriptor?? [ 3163.336133][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.058003][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.382384][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.416151][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:48 executing program 4: socket(0x1000000010, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:51:48 executing program 0: r0 = epoll_create(0x2) epoll_wait(r0, 0x0, 0x0, 0x0) 04:51:48 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x840) 04:51:48 executing program 3: r0 = epoll_create(0x2) epoll_wait(r0, 0x0, 0xffffffffffffff9c, 0x0) 04:51:48 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0) [ 3165.565973][T25110] usbhid 2-1:0.0: can't add hid device: -71 [ 3165.572080][T25110] usbhid: probe of 2-1:0.0 failed with error -71 04:51:48 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x120000810) 04:51:48 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fchownat(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 04:51:48 executing program 2: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x145042, 0x0) r2 = dup3(r0, r1, 0x0) symlinkat(&(0x7f0000001140)='./file1\x00', r2, &(0x7f0000001180)='./file0\x00') [ 3165.606225][T26117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3165.638605][T25110] usb 2-1: USB disconnect, device number 15 04:51:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180)=ANY=[], 0xb) 04:51:48 executing program 5: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000200)='./file1\x00', 0xee01, 0xffffffffffffffff, 0x1000) 04:51:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 3165.888555][T26145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3166.275879][T25110] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3166.456252][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3166.636039][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3166.647143][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3166.656330][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3166.671234][T25110] usb 2-1: config 0 descriptor?? [ 3167.097266][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.496143][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3168.546809][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:52 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x20, &(0x7f0000000200)) 04:51:52 executing program 2: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x20344, 0x20) 04:51:52 executing program 5: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) statx(r0, &(0x7f0000001a80)='./file1\x00', 0x100, 0x0, &(0x7f0000001ac0)) 04:51:52 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x40000, 0x0) 04:51:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 3169.069201][T26168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3169.075973][T25110] usbhid 2-1:0.0: can't add hid device: -71 [ 3169.084748][T25110] usbhid: probe of 2-1:0.0 failed with error -71 04:51:52 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2842, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) [ 3169.111684][T25110] usb 2-1: USB disconnect, device number 16 04:51:52 executing program 5: pipe2(&(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 04:51:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x167242, 0x1ba) 04:51:52 executing program 3: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x145042, 0x0) faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x4) 04:51:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d500)=ANY=[@ANYBLOB='X\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0ff000008000100753332"], 0x58}}, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 04:51:52 executing program 2: fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) [ 3169.349318][T26194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3169.586289][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3169.785855][T14180] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3170.135980][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.176056][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3170.187020][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3170.196574][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.210195][T14180] usb 2-1: config 0 descriptor?? [ 3170.616125][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.624451][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3171.656189][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:55 executing program 5: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) 04:51:55 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x402, 0x0) 04:51:55 executing program 3: uname(&(0x7f0000000000)=""/175) 04:51:55 executing program 2: pipe2(&(0x7f0000003200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 04:51:55 executing program 4: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0xc8e00, 0x0) 04:51:55 executing program 3: pipe2(&(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) [ 3172.576186][T14180] usbhid 2-1:0.0: can't add hid device: -71 [ 3172.583271][T14180] usbhid: probe of 2-1:0.0 failed with error -71 [ 3172.635868][T14180] usb 2-1: USB disconnect, device number 17 04:51:55 executing program 0: 04:51:55 executing program 2: 04:51:55 executing program 4: 04:51:55 executing program 5: [ 3172.695971][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:55 executing program 3: [ 3173.176047][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3173.185921][T14180] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3173.587906][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.598977][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3173.610741][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3173.622406][T14180] usb 2-1: config 0 descriptor?? [ 3173.746383][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.777631][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.826491][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:51:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:51:59 executing program 2: 04:51:59 executing program 0: 04:51:59 executing program 4: 04:51:59 executing program 5: 04:51:59 executing program 3: 04:51:59 executing program 5: 04:51:59 executing program 0: 04:51:59 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$sock_int(r0, 0xffff, 0x1019, 0x0, &(0x7f0000000080)=0xfffffffffffffffe) 04:51:59 executing program 4: sigaltstack(&(0x7f0000fff000/0x1000)=nil, 0x0) pipe2(&(0x7f00000016c0), 0x0) 04:51:59 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$unix(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="8202ad4fac"], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000000)=0x8) [ 3176.006326][T14180] usbhid 2-1:0.0: can't add hid device: -71 [ 3176.014790][T14180] usbhid: probe of 2-1:0.0 failed with error -71 [ 3176.087804][T14180] usb 2-1: USB disconnect, device number 18 04:51:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000004a80)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, 0x0) [ 3176.216199][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3176.675891][T14180] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3176.860908][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3177.035898][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.046962][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3177.061950][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.077541][T14180] usb 2-1: config 0 descriptor?? [ 3177.896111][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3178.936047][T13053] kworker/dying (13053) used greatest stack depth: 21752 bytes left [ 3178.936382][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:52:02 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/4) 04:52:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x0, 0x0, 0xe2a1}}) 04:52:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="530000004ca6aeabc81e1520000000000000001000fff64017db98"], 0x1ba) 04:52:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x137, &(0x7f0000000140)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 04:52:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1) [ 3179.256151][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3179.376624][T14180] usbhid 2-1:0.0: can't add hid device: -71 [ 3179.382686][T14180] usbhid: probe of 2-1:0.0 failed with error -71 04:52:02 executing program 3: add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 04:52:02 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x0, 0x64}], 0x1, 0x0, 0x0, 0x0) 04:52:02 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/31) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 04:52:02 executing program 0: [ 3179.430823][T14180] usb 2-1: USB disconnect, device number 19 04:52:02 executing program 4: 04:52:02 executing program 3: [ 3179.976310][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.067014][T25110] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3180.216137][ T2815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.225468][ T1948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.243275][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.252577][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.446618][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3180.457687][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3180.468213][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.483738][T25110] usb 2-1: config 0 descriptor?? [ 3180.957378][T25110] keytouch 0003:0926:3333.0324: fixing up Keytouch IEC report descriptor [ 3180.968344][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0324/input/input799 [ 3181.023002][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3181.065969][T25110] keytouch 0003:0926:3333.0324: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3181.208039][T14180] usb 2-1: USB disconnect, device number 20 04:52:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:52:04 executing program 0: 04:52:04 executing program 4: 04:52:04 executing program 2: 04:52:04 executing program 3: 04:52:04 executing program 5: 04:52:04 executing program 3: 04:52:04 executing program 5: 04:52:04 executing program 2: 04:52:05 executing program 4: 04:52:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 04:52:05 executing program 3: shmget(0x1, 0x3000, 0x6c0, &(0x7f0000ffc000/0x3000)=nil) [ 3182.056573][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.315930][T19969] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 3182.716597][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3182.727592][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3182.739672][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.756998][T19969] usb 2-1: config 0 descriptor?? [ 3183.096430][T20571] net_ratelimit: 4 callbacks suppressed [ 3183.096442][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3183.236956][T19969] keytouch 0003:0926:3333.0325: fixing up Keytouch IEC report descriptor [ 3183.260085][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0325/input/input800 [ 3183.347918][T19969] keytouch 0003:0926:3333.0325: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3183.516098][T19969] usb 2-1: USB disconnect, device number 21 04:52:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x44, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a581c8316cae5b787b9") 04:52:07 executing program 4: symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00') open$dir(&(0x7f00000002c0)='./file0\x00', 0x301, 0x0) 04:52:07 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000000)) 04:52:07 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x100000001}}, 0x0) 04:52:07 executing program 5: socket$inet6(0x18, 0x1, 0x0) 04:52:07 executing program 3: openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{}], 0xe, 0x0) 04:52:07 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) 04:52:07 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000001200)="16a5f960e049bdc8b32e1a7904bb5bd6208eb11162dcda773013440b72893c867c9414307f5213c2032fdbf07560c5be1295109790305ebb2b05fc7734a5d2af066f045c097da8d3f924ffe17e844ca560b8bd3ee2b7c8dcb1abcc50ab23d8c3cc1ab8938a34047ba62e85a0c9a9035f5a1d50dec7b82796026a0c0d87c791ff4f6e6145b1ac3391df5753c8f1e9ae3521ce058f0a9c", 0x96) 04:52:07 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2e5c9454eb8f5e5a, 0x0) 04:52:07 executing program 0: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) getsockname$inet(r0, 0x0, 0x0) [ 3184.136266][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:07 executing program 5: recvfrom$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffff5, 0x0, &(0x7f0000000280)={0x18, 0x3}, 0xc) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 04:52:07 executing program 3: [ 3184.635990][T20571] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 3184.996021][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.007346][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3185.022828][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.041664][T20571] usb 2-1: config 0 descriptor?? [ 3185.177283][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3185.346289][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3185.537109][T20571] keytouch 0003:0926:3333.0326: fixing up Keytouch IEC report descriptor [ 3185.558730][T20571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0326/input/input801 [ 3185.653004][T20571] keytouch 0003:0926:3333.0326: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3185.816431][T14069] usb 2-1: USB disconnect, device number 22 [ 3186.216215][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:52:09 executing program 0: 04:52:09 executing program 4: 04:52:09 executing program 5: 04:52:09 executing program 2: 04:52:09 executing program 3: 04:52:09 executing program 2: 04:52:09 executing program 4: 04:52:09 executing program 5: 04:52:09 executing program 3: 04:52:09 executing program 0: 04:52:09 executing program 4: [ 3186.985949][T14069] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 3187.256173][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.376538][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3187.387475][T14069] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3187.405621][T14069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3187.423459][T14069] usb 2-1: config 0 descriptor?? [ 3187.927568][T14069] keytouch 0003:0926:3333.0327: fixing up Keytouch IEC report descriptor [ 3187.939283][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0327/input/input802 [ 3188.041450][T14069] keytouch 0003:0926:3333.0327: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3188.296233][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3188.343111][T20571] usb 2-1: USB disconnect, device number 23 [ 3188.377241][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:52:12 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x40049409, 0x0) 04:52:12 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @remote}}}}, 0x0) 04:52:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 04:52:12 executing program 4: socketpair(0x1d, 0x0, 0x8, &(0x7f0000000000)) 04:52:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x8982, &(0x7f0000000140)='ip6erspan0\x00') 04:52:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8901, &(0x7f0000000000)={0xfdfdffff, 'bond_slave_0\x00'}) 04:52:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000001580)={0x10, 0x7d, 0x321}, 0x10}], 0x1}, 0x0) 04:52:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 04:52:12 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/cpuinfo\x00', 0x0, 0x0) 04:52:12 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '(\x8f.:\xf6'}, 0x0, 0x0, 0x0) 04:52:12 executing program 0: bpf$ITER_CREATE(0xa, &(0x7f0000000000), 0x55) [ 3189.346213][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3189.525953][T20571] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3189.817679][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3189.936074][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3189.947353][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3189.956903][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3189.973938][T20571] usb 2-1: config 0 descriptor?? [ 3190.376326][T14951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3190.467284][T20571] keytouch 0003:0926:3333.0328: fixing up Keytouch IEC report descriptor [ 3190.482713][T20571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0328/input/input803 [ 3190.576420][T20571] keytouch 0003:0926:3333.0328: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3190.916028][T20571] usb 2-1: USB disconnect, device number 24 [ 3191.416556][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3191.433350][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) 04:52:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:52:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000016c0)=@buf) 04:52:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80) 04:52:14 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind(r0, &(0x7f0000000000)=@phonet={0x23, 0x0, 0x3}, 0x80) 04:52:14 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="e44366ff9ec91505a3ae1f7a4e9e91", 0xf}, {&(0x7f0000001100)="af", 0x1}], 0x2, &(0x7f0000002600)=[{0x18, 0x0, 0x0, "ad"}, {0x10}], 0x28}, 0x0) 04:52:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8981, &(0x7f0000000000)={0x0, 'bond_slave_0\x00'}) 04:52:14 executing program 4: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x8f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:52:14 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x8901, 0x0) 04:52:14 executing program 0: r0 = syz_open_dev$char_raw(&(0x7f0000000100)='/dev/raw/raw#\x00', 0x0, 0x0) ioctl$CHAR_RAW_RAGET(r0, 0x1263, &(0x7f0000000140)) 04:52:14 executing program 3: io_setup(0x5, &(0x7f0000000000)=0x0) io_setup(0x2, &(0x7f0000000080)) io_setup(0x7, &(0x7f0000000900)) io_destroy(r0) 04:52:14 executing program 5: bpf$ITER_CREATE(0x9, 0x0, 0x0) [ 3192.115891][T25110] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3192.456210][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3192.555992][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3192.567076][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3192.582543][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.601689][T25110] usb 2-1: config 0 descriptor?? [ 3193.077325][T25110] keytouch 0003:0926:3333.0329: fixing up Keytouch IEC report descriptor [ 3193.089678][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0329/input/input804 [ 3193.205266][T25110] keytouch 0003:0926:3333.0329: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3193.496188][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3193.557920][T19969] usb 2-1: USB disconnect, device number 25 04:52:17 executing program 2: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/186, 0xba}, {&(0x7f0000000280)=""/84, 0x54}], 0x2, &(0x7f0000002680)=[{&(0x7f0000000540)=""/243, 0xf3}, {0x0}], 0x2, 0x0) 04:52:17 executing program 0: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 04:52:17 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x80087467, &(0x7f0000000000)) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) 04:52:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8901, &(0x7f0000000000)={0x0, 'bond_slave_0\x00'}) 04:52:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000140)) 04:52:17 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 04:52:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x200000f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:52:17 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0}, 0x50) 04:52:17 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000010c0)={0x0, r0}, 0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={'crct10dif\x00'}}) 04:52:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 04:52:17 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 04:52:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x4500, 0x0) 04:52:17 executing program 3: waitid(0x2, 0x0, 0x0, 0x2, &(0x7f0000001180)) 04:52:17 executing program 2: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) 04:52:17 executing program 4: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xa000000000000000}]) 04:52:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000001580)={0x28, 0x25, 0x321, 0x0, 0x0, "", [@nested={0x15, 0x0, 0x0, 0x1, [@generic="a502d16ef96f70e7890c4a40dd31f93603"]}]}, 0x28}], 0x1}, 0x0) [ 3194.456675][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3194.547680][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3194.748798][T20571] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3195.116528][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3195.127668][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3195.145450][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.164092][T20571] usb 2-1: config 0 descriptor?? [ 3195.576178][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3195.657488][T20571] keytouch 0003:0926:3333.032A: fixing up Keytouch IEC report descriptor [ 3195.669867][T20571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032A/input/input805 [ 3195.751351][T20571] keytouch 0003:0926:3333.032A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3196.104902][T20571] usb 2-1: USB disconnect, device number 26 04:52:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000140)) 04:52:19 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) 04:52:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xd0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'sit0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "df6474b3899b008306b16466a4e5e8fd5805cb35848d87e43adda3d9dc37"}}, {{@ipv6={@dev, @private0, [], [], 'team_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 04:52:19 executing program 5: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) 04:52:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 04:52:19 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 3196.616486][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c"], 0x60}, 0x0) 04:52:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@private2, @mcast2, @remote, 0x0, 0x7fff}) 04:52:19 executing program 0: r0 = socket(0x2, 0x3, 0xf7) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4001) 04:52:19 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0) 04:52:19 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000400)='macvtap0\x00') 04:52:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000001580)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xeb1, 0x0, 0x0, 0x1, [@generic="a502d16ef96f70e7890c4a40dd31f936900f5c1197d1887616d443227ffa1b0e6e53b0c30730c2305b9086162f0b71f0e9503093a2243bc39fe73769498bdca58cbda1b43a772b9ea66dcb8564565da96b574573b704fb257331bbc8289b070799c7ef385ca23b6b2a4fdd919d40ef1592122ec63335f80f1e018304cb6847aa4b917208a92f15be71d6ef9f915c04899be2284404c74d58d567145a9f4ac5a62f8b667b62c6f702b2143482e0f244e5d07b976ab4f7b4be5c8ba09ce30e30ecf39037bee681bed2940948b9ca2e82e8ca8e057f8ac9aea4b0282df91c52357cfa7446c1d9dd77d17477c96c24622675af2316177060e68b1f9e905809b949f25d67fc4ab156376dc344d60d62ba4a8c0269e37cbbaacfeac92b81311dfe317cd6e32ebab08dda18e8964e696253dc3aa10c46942178e60eeb82b534ad10cde6d8cfd12204ee06f461983c66fb0dbefe6c32ee0bb3d6387f90cd120d2d2c866a30ce98b2c0473884455a57047f6b4f2a96b289a7735b155811962e603565d9d849d1bcfbec49bec32e9e29f77fce9180fc1d5a00365c97f24e1a7ceb34826ef4f050bdffc47bded2cb6995de83d7d5cdabd950636c0679ce329b0461be93466bd796f4c3d199e472be876602db52c6d1b2e4cc773230c13e653fc33190b4eb8ce2a17d02003f3f0ceb71b1c42b0dded5474ac5d9fac02f4a192fc86d453f35d8dda5d686f91d098b3e60f56ed51fea59125cdbe6a214606aeb9f02f3a9f691de47df59e41c6deb1bb4df16dd39f17634af463ccd8475208c134fc9702e4a340f63e22fd13bc0949860311359a69402631c3db1a98dfdcc97d6c1309c2e76ed64013ea0e87b24bec18cdb0df03e2762167a8ce0308449be4e59887cd7fe9b79bd7d467690d7358b70e998ac5e6ca755c22979655e1f270c5eaa650872835c741d3d9ed2957861fa3e5f1aa0e042912cda4b36c47504bfa152048632be798adf6e959a12ad06a872a41e102ca1a2aea9d87e055c28f9c9a90373428c316b22fc126325ec76a647ee331554de558d953e876e0ae682c94d98157300cc500ff1b40e61aec527a0f1c3e15e4eb2a8608a240553750f8a7eaddc6616defcd87c050bddea4a1ac26761e7f5733459cd222cde5b6c4c5fe3aecb129b43e1d832306f6e70a9f60715aafc479404ddbceed354bfe43379faa031224bb436f1891d12f0875fcb19886300c46a90dcadcf92567902f0cee5bb5c934b0e88ec0e0c2bef6fa339f9a84790bd5e61a6e5a7f2de2adad51acac4db9709bd4477f39ecc5a6f398e2e91fb9c6a4d251b6df7e6cb0480425be1502ca9856cb0e18b0b7127cd0cc8fc5da8e3e984bc3d44e6ac5b8bb129c8b576211e4185081b00843b4c7062067c86f3aa3a014971b88dd7a29c3a0c00fca3f930be2523d23e393d4d914012d8fb892ed82b0aaafda820637f09de4f28e4bf60e8b212312e19bff67d63b0703ca7f6fb9c4839e12462209bee7de1d72a43d7bec2b7c14cf229a04c343665e9820eb8c0fdea4e5f23eed7fd0df5a603400e44b6ba6ecf01d6d94661c3cc4b022d082c9d890afff4be3bad8a142b5f5f3dfd4a99bba6ff2a77612e5630dfa17988e7574acf27cad7c97f66c36702eb451d65a453803675cc06ddeb74f6ae1820285fea39fdfa9517579d55a4a807f773ef719daa6b43a429671abdf22f2783fa7b6ea65c1ff01525a92b726e66196266f56fde76e988146dce7a8b9d6f29338a4ca28633bd97af19ba938bea1ce8abdc0a5c3eaf6c109920707e16373daa0fbd687419e09702549d84cc7c9858ee7182a404d6d5659ca00f6a9efa24eab1c758da075354fafa5f18daa0bedd06a904521ee57f7401f97032abce6593dd7baf4dfa27553ae3af2d6894e15cb5a0128bf27fc09526cbe36c18adbb034bfed946b6f5f51da56580956ff399bba5af7575ac8c510e801399947da19aa1c3691004dc6449da34e3d669678c5e56a28a89adc3a56743c4962f0b78a3db1baaa53f351bb58cd64d49874c1fc84d71ef52b29deb75e8431eb2f89ac739a3528c9532240a6376d068c3f4a6a4edd1aa999fffb9da737d5e7442da4ca870b8b35f7c734551d698a8d81e3019d1cc2f21714461085d6522bd51f7982eb8d7fe0b7f88e9421a16988ad0aa097ae6468cec0d1e08af8f00c355690c4187c14e6657870a7fbc7e4ba0617eb94e215c4cae85a7807563f021907e74733c7f6733da25f92a770c0bcfa5d82aaf0242e1eb38a608301787af499d2085f909d2ffa6ce1faa47e12463ee09ef6d52d68e6ac1cd1f8254dc296e9bb455055877b2c389b29038085fe5b153834daac84c7bb9e0c13590414be82e1f3b079deba5235c902caa8ad8ef732fd15d2840aee58f2e677ad9289f4b43752af94391bb198922f90fae35bb9db4caf4a286cd28b2ec5803e62d67b8f5916107ae108c0fc31f1e061c28da78407842c1cbc72e9c0cb21627d67b1a6268b863b77aeb290f93fd20afb7a417205c8230bc505bba4b8caf86562ca3b486805d318bb342f6134f32e201037e1c35a1032afea720755a216631ecc0d4bea06de6b1ee2a164b07cdbbefd7d84bf5d0b300b093a8c33b0c23563afbbfc542e1d55416680d55453b4923b3600170e3b33fd5f024637db8874da657cc22677799b863c868c4de540af3e5f809bcf109341b350476ee094fffb78f8c64479096e20db20497d3f84fa3387f26884655130bf098e3557575eb4c190db73dede24b9c64e2f2f06784f3241bfd3cea6ac5d702e502386a479fa81151897cbcb4b45eaa304a411c02229967bd308df2a5aa9677bcd1f6aae2e2f362782aab7c5cbeb26426041ea9058f5e5da78556f14381215a97836eef8dc835b05bb3c56d21a7f6cabd48f719006e0eb2e554e92aa9b839e6aa8bc1a75c1c06eabaf420b3ab9c1d1bee7b77a85c1c6250a7cad7ea9f205031e5bebc499703357c219f881ff8499057d91065d250f9bad33bdc2d39073e4e2b23f06aaef2de004fb530693f4c0f8eec62cfd5b379cd8afa0f0ef5bd23a971f75537ae69ca4397a32c5031a68f63717f970c5694f4637d8c7f1fc3678940bb0eee1981a970fea851e51a6a5f2e4e852b929fe18076fa6ff41e19b3855d98292cc1c8d0fbdfd4d7c9b285be0a09ed1ab42c549dedc04df71fc315122f4cedbdbd90e29dc56aacebe6e277104f2835ebe260eaf131b27fce9985d4bad727e697a2d755d57cd1463e43edd5ecd0cb6c206d9d0dae67321e844e3a7eacd41c5662947e873c9a9fcd97c09f3e57cf5710712f780c926fb7e82cc909d8fa3cdc86155e94303d42708ab86e02bef2ad66ba82b8ea48763735c012c979414e3fc30f69ecda0acdb52e0b444783c13259ddbbc5ce89547c1ef1e9f24f8197316cbd684430ef8dce7cd4ef28ab6141fab591e24adfdd0625d97f164b645e1c2709f28434258047a0fe572f6fa0e2b91a832ccb22916205818fffb639f175987b6cd01101c50082c345fe2f82bc9a76e5d5edd431e290893195da34dfcaaeab8f7afb132136e931ca8cf7104cafaf4f795ac0e3cfcb6f957971bdb950246509ff57a43c40db7a434067a79dcce8a63d12a8b97383fb84ca453c01c56a5a4129bf5796a26e066fd678f507da30d6d7b63b61897a0193dec0a33ebc393554f02d31fc7aee882d016eb77552ab4ba4f3b45557fb8eea3b62b3da42d2cfe85ff358b0352f87141a3c583803006b706e7c3faf6fe6bad92634d123cd243cbe2a9b6cebdb1216a2705a4afcd83bf8d3ac44a14bdc09db8433ab66352a98363fd075382c9ad6e213309e9a50bcdcb5926c04e73b1f5282db0d35e51af0f71103aa7c0ff222c27af74581ccb4746dff05ef21ded8c77c5ffd6495d6363d12882992cb8f33087f5fcc86193ff2fbd871d70b1ae0521ede6d93b9433fc5bfef749ccbce72b7039b7bf1bee4f13fea6f660b353fcf682da52a67d37a5cc4b6611691eb015ac36f40e3a044c355c62511d88e1ce00033c944b1579b5b0cc43842fffaf3ebeae6874e473892767c850deaa81f17cb017c5a3265d0e817f2a06af52045d179ae8c7c3d9230c191382fac891112d535df297ba14ff4b127eac06b2284b9abec2914cbc6494e58ad706cc39bbbfd5d69f33c43ec83451a7cedb9b4c167c1dd843fde27631f3a1964e9a9a5b550a5418e67e69254589bfd7914d2867cee7e0cad5226fe2fbc6fb517029b48fc3c58876caf69cfdd8749809afdeba65d604e8687524b9630c08fedf163520a2c3a338ad3c645c5eac93ea98d3f18721224d6362741ea44a212921300e33d1def5e147f85e9f6e3cebd0c53c366803ea0a85780ceba3b383fa6ef68563ea1c2e5e4d32c61e62fb04471c530cef4eba059f0a23dc76f7a2fdd66e740cc2598bb488fafa9436544a66b1e12a727efee43c73acc8420cb58219672404a2b58594707c109eb0e8c5646f0c18eb58bd7753071f36b54fef537c01d105664889fe0c746525a9161278a9d46c7dd2d1851af28fcd00fed8a9aefb63274b1468934620b600d0cb592d996d9b64d5b9ccc3f2c7b749db0989a3e9c151a6873d856b118d2f1ed5cfb4b5cc20db909e2a3873bd0bf85ba67f4f4588b7ce67ff7a3ca97d6269e310d9328d32f5471b5f43b53268deb416b0aa9c2ff601ca7fef9dc44defcf428a590da1d63613dc77e20c8f91bd4352ff209918f780cb85dc6038e2078dbee3da598785ea781b8973c0b843e8d7bb34a0e769ebc94efaf0f10f8df70c1f0c41130fbbd1e198d599d711f2a8092e5882fe45b7d1cfa68df215cdcf79866da5da9d2700b5489f8fe4bfe46bba7ef0ebb5e99ac0a45d2fb96299006510a52fc8608ff104b5432be7b7174abb1704cd823c74046467c47afd9e57e5a53aa9e5f99d11ce7dbef07f4221c025cc939299e572ca5df86631e56d46ce70fecd5fcebb58d8772e578c4b93e650e1a9ac3161d3b57ab9849245f28895707619014f3fe6b7b8218d0e7309b77002c997490844b988e5f0e91d207fb9274accf5924fdcc423ce6ad9810a992b47443fc73f0166578e3a7b13e2d446290f9363437cb9564d07288797540f948e93fa7469d8c0b1e394e8c2c1fcbaa3db2792729fce89197a8ee7e994a640259d9794dba861e893403e8e86623ff085e306b3085200dbeafd4e74464e06712de379d2eb0a05d19a57a0600523fc590c238a53a669cfa48b2f4a031c50df075824008efc1d446f6f25677ab3dd7bbce629ce159b578d7090820b376ea89abc1ee1af7f726814398e126"]}]}, 0xec4}], 0x1}, 0x0) [ 3197.255922][T19969] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 3197.502793][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3197.646067][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3197.657248][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3197.669600][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3197.678986][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3197.684477][T19969] usb 2-1: config 0 descriptor?? [ 3198.177349][T19969] keytouch 0003:0926:3333.032B: fixing up Keytouch IEC report descriptor [ 3198.188216][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032B/input/input806 [ 3198.284177][T19969] keytouch 0003:0926:3333.032B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3198.640488][T10410] usb 2-1: USB disconnect, device number 27 [ 3198.696381][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000000140)) 04:52:22 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)) 04:52:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000001580)={0xfb8, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xfa5, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0xfb8}], 0xffffff1f}, 0x0) 04:52:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f000000abc0)=[{&(0x7f0000001580)={0x14, 0x28, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 04:52:22 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000000)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 04:52:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000ac80)={0x0, 0x0, &(0x7f0000004440)=[{0x0}, {&(0x7f0000002380)={0x10}, 0x10}, {&(0x7f0000002640)={0x10}, 0x10}], 0x3}, 0x0) 04:52:22 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000100)={0x0, 0x7ff}) 04:52:22 executing program 3: 04:52:22 executing program 4: 04:52:22 executing program 0: 04:52:22 executing program 2: 04:52:22 executing program 5: [ 3199.416201][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.746232][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.765990][T10410] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3200.156792][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3200.167758][T10410] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3200.185943][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3200.198996][T10410] usb 2-1: config 0 descriptor?? [ 3200.547301][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3200.686913][T10410] keytouch 0003:0926:3333.032C: fixing up Keytouch IEC report descriptor [ 3200.700279][T10410] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032C/input/input807 [ 3200.776151][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3200.796061][T10410] keytouch 0003:0926:3333.032C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3201.136432][T10410] usb 2-1: USB disconnect, device number 28 04:52:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x22, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a") 04:52:24 executing program 3: 04:52:24 executing program 0: 04:52:24 executing program 4: 04:52:24 executing program 2: 04:52:24 executing program 5: 04:52:24 executing program 5: 04:52:24 executing program 0: 04:52:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@can, 0x80, 0x0}, 0x0) 04:52:24 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 04:52:24 executing program 4: 04:52:24 executing program 0: [ 3201.816361][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3202.235970][T19969] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 3202.626839][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3202.637800][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3202.655886][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.685229][T19969] usb 2-1: config 0 descriptor?? [ 3202.861725][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3203.177609][T19969] keytouch 0003:0926:3333.032D: fixing up Keytouch IEC report descriptor [ 3203.188866][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032D/input/input808 [ 3203.314815][T19969] keytouch 0003:0926:3333.032D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3203.577045][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3203.642254][T20571] usb 2-1: USB disconnect, device number 29 [ 3203.896197][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x22, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a") 04:52:27 executing program 4: 04:52:27 executing program 5: 04:52:27 executing program 0: 04:52:27 executing program 3: 04:52:27 executing program 2: 04:52:27 executing program 0: 04:52:27 executing program 3: 04:52:27 executing program 2: 04:52:27 executing program 5: 04:52:27 executing program 4: 04:52:27 executing program 3: [ 3204.760687][T14180] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3204.936301][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3205.126034][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3205.137170][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3205.146340][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.158366][T14180] usb 2-1: config 0 descriptor?? [ 3205.627389][T14180] keytouch 0003:0926:3333.032E: fixing up Keytouch IEC report descriptor [ 3205.657359][T14180] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032E/input/input809 [ 3205.755402][T14180] keytouch 0003:0926:3333.032E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3205.976705][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3206.099432][T14180] usb 2-1: USB disconnect, device number 30 04:52:29 executing program 5: 04:52:29 executing program 0: 04:52:29 executing program 2: 04:52:29 executing program 4: 04:52:29 executing program 3: 04:52:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x22, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a") [ 3206.623004][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:29 executing program 3: 04:52:29 executing program 2: 04:52:29 executing program 5: 04:52:29 executing program 4: 04:52:29 executing program 0: 04:52:30 executing program 2: 04:52:30 executing program 0: 04:52:30 executing program 4: 04:52:30 executing program 5: 04:52:30 executing program 3: 04:52:30 executing program 4: [ 3207.016306][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3207.365932][T19969] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3207.781101][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3207.792024][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3207.811207][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3207.827310][T19969] usb 2-1: config 0 descriptor?? [ 3208.056163][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3208.287022][T19969] keytouch 0003:0926:3333.032F: fixing up Keytouch IEC report descriptor [ 3208.308286][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.032F/input/input810 [ 3208.394552][T19969] keytouch 0003:0926:3333.032F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3208.714862][T19969] usb 2-1: USB disconnect, device number 31 [ 3209.024978][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3209.098328][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x33, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22") 04:52:32 executing program 2: 04:52:32 executing program 3: 04:52:32 executing program 5: 04:52:32 executing program 0: 04:52:32 executing program 4: 04:52:32 executing program 5: 04:52:32 executing program 4: 04:52:32 executing program 3: 04:52:32 executing program 0: 04:52:32 executing program 2: 04:52:32 executing program 3: [ 3209.656534][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3209.915933][T10410] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3210.136131][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3210.276077][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3210.287239][T10410] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3210.303666][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.316230][T10410] usb 2-1: config 0 descriptor?? [ 3210.796976][T10410] keytouch 0003:0926:3333.0330: fixing up Keytouch IEC report descriptor [ 3210.818266][T10410] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0330/input/input811 [ 3210.902996][T10410] keytouch 0003:0926:3333.0330: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3211.176506][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3211.253575][T20571] usb 2-1: USB disconnect, device number 32 04:52:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x33, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22") 04:52:34 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) 04:52:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000005000000000000000001"], &(0x7f0000000400)=""/210, 0x32, 0xd2, 0x1}, 0x20) 04:52:34 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0), 0x4) 04:52:34 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "4dc42a", 0x44, 0x2f, 0x0, @private1, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}, 0x0) 04:52:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0x0) 04:52:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x1, 0x8, 0xc6a9}, 0x20) 04:52:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) 04:52:35 executing program 0: r0 = getpgid(0x0) r1 = getpgid(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, r2, &(0x7f0000000280)) 04:52:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:52:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', 0x0}) 04:52:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541e, 0x0) [ 3212.233126][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.415966][T19969] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3212.697333][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.786137][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3212.797208][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3212.812201][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.831959][T19969] usb 2-1: config 0 descriptor?? [ 3213.256303][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3213.317374][T19969] keytouch 0003:0926:3333.0331: fixing up Keytouch IEC report descriptor [ 3213.328370][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0331/input/input812 [ 3213.436112][T19969] keytouch 0003:0926:3333.0331: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3213.743982][T20571] usb 2-1: USB disconnect, device number 33 04:52:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x33, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22") 04:52:37 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={0x0, 0x44, &(0x7f0000000480)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS]}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) 04:52:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000180)={'vlan0\x00', @ifru_ivalue}) 04:52:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="d666cc0445f785a1fa5f1fafeae7", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) 04:52:37 executing program 2: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0)) 04:52:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000540)='ethtool\x00') add_key$keyring(&(0x7f0000000d80)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000c00)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) [ 3214.296227][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, 0x0) 04:52:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/210, 0x38, 0xd2, 0x1}, 0x20) [ 3214.391864][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3214.425282][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:52:37 executing program 0: 04:52:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, 0x0, 0x0) 04:52:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000021c0)={0xfed5, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xffffffffffffffba, 0x9, @dev}]}, 0xfed5}}, 0x0) 04:52:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd77, 0x0, 0x0) [ 3214.970596][T25110] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3215.336296][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3215.369464][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3215.380469][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3215.397118][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3215.408186][T25110] usb 2-1: config 0 descriptor?? [ 3215.736161][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3215.877054][T25110] keytouch 0003:0926:3333.0332: fixing up Keytouch IEC report descriptor [ 3215.898554][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0332/input/input813 [ 3215.996333][T25110] keytouch 0003:0926:3333.0332: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3216.363935][T25110] usb 2-1: USB disconnect, device number 34 [ 3216.390473][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3216.399646][T15556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3216.409947][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3216.422342][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x3c, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b098f4a58") 04:52:40 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x25, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 04:52:40 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x200081, 0x0) 04:52:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 04:52:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 04:52:40 executing program 4: syz_io_uring_setup(0x2f3e, &(0x7f0000000100), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:52:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8981, 0x0) 04:52:40 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, &(0x7f0000000080)={'batadv0\x00'}) 04:52:40 executing program 4: r0 = io_uring_setup(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') rt_sigaction(0x0, &(0x7f0000000200)={&(0x7f0000000180)="c4a291f7ef430f2965c4672ef344a5450f3802ae00000000c4025516c70f7e1ec42145ee7700c12aa8660f380ad28fc97899a4f086ea34a7", 0x10000000, &(0x7f00000001c0)="f3470f5a55d466440f38379990ffffff435f649844c9c4e23940c0407ede8f4878c346ae00c4e26d0d5f058f2820a60b03"}, &(0x7f0000000300)={&(0x7f0000000240)="c44251df9c7b0000000064d8c7c4c2fd3565993e420f4204bce50066660f636105c4c24529c5660f3a217b0099c4627d0f02c4417a707d04f3", 0x0, 0x0}, 0x8, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x240009d4) eventfd(0x0) unshare(0x40000000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0xa4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9116}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffe539}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 04:52:40 executing program 2: socket$packet(0x11, 0x2, 0x300) pselect6(0x92, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 04:52:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, 0x0, 0x62) 04:52:40 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x25, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) [ 3217.147989][T27285] IPVS: ftp: loaded support on port[0] = 21 [ 3217.279625][T27291] IPVS: ftp: loaded support on port[0] = 21 [ 3217.496179][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.656003][T14069] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3218.016742][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3218.036178][T14069] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3218.045540][T14069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3218.095082][T14069] usb 2-1: config 0 descriptor?? [ 3218.540935][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3218.593315][T14069] keytouch 0003:0926:3333.0333: fixing up Keytouch IEC report descriptor [ 3218.623508][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0333/input/input814 [ 3218.644807][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3218.730514][T14069] keytouch 0003:0926:3333.0333: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3219.109032][T14069] usb 2-1: USB disconnect, device number 35 [ 3219.576275][T20571] net_ratelimit: 1 callbacks suppressed [ 3219.576286][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:42 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x3) 04:52:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') epoll_wait(r0, &(0x7f0000000800)=[{}], 0x1, 0x0) 04:52:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "4dc42a", 0x44, 0x2f, 0x0, @private1, @loopback}}}}, 0x0) 04:52:42 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x25, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 04:52:42 executing program 4: r0 = io_uring_setup(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') rt_sigaction(0x0, &(0x7f0000000200)={&(0x7f0000000180)="c4a291f7ef430f2965c4672ef344a5450f3802ae00000000c4025516c70f7e1ec42145ee7700c12aa8660f380ad28fc97899a4f086ea34a7", 0x10000000, &(0x7f00000001c0)="f3470f5a55d466440f38379990ffffff435f649844c9c4e23940c0407ede8f4878c346ae00c4e26d0d5f058f2820a60b03"}, &(0x7f0000000300)={&(0x7f0000000240)="c44251df9c7b0000000064d8c7c4c2fd3565993e420f4204bce50066660f636105c4c24529c5660f3a217b0099c4627d0f02c4417a707d04f3", 0x0, 0x0}, 0x8, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x240009d4) eventfd(0x0) unshare(0x40000000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0xa4, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9116}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffe539}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 04:52:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:43 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x25, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) [ 3219.798010][T27383] IPVS: ftp: loaded support on port[0] = 21 04:52:43 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000500)='user\x00', 0x0, 0xfffffffffffffffc) 04:52:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') write$cgroup_pid(r0, 0x0, 0x0) 04:52:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000980)='timers\x00') 04:52:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) 04:52:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5410, 0x0) 04:52:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, &(0x7f0000000400)={@private1}, 0x20) 04:52:43 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0, 0x0) 04:52:43 executing program 4: 04:52:43 executing program 2: 04:52:43 executing program 0: [ 3220.626196][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3220.681768][T19969] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3221.050518][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3221.070828][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3221.092034][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3221.123543][T19969] usb 2-1: config 0 descriptor?? [ 3221.662491][T19969] keytouch 0003:0926:3333.0334: fixing up Keytouch IEC report descriptor [ 3221.674837][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0334/input/input815 [ 3221.715069][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.786295][T19969] keytouch 0003:0926:3333.0334: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3221.817887][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.839961][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.850473][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.858622][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3222.155736][T14069] usb 2-1: USB disconnect, device number 36 04:52:45 executing program 2: 04:52:45 executing program 3: 04:52:45 executing program 0: 04:52:45 executing program 4: 04:52:45 executing program 5: 04:52:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:45 executing program 3: 04:52:45 executing program 5: 04:52:46 executing program 4: 04:52:46 executing program 2: 04:52:46 executing program 0: 04:52:46 executing program 5: 04:52:46 executing program 3: 04:52:46 executing program 2: [ 3222.948360][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:46 executing program 0: 04:52:46 executing program 5: 04:52:46 executing program 4: [ 3223.550403][T20571] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3223.936159][T20571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3223.947299][T20571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3223.964795][T20571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3223.982129][T20571] usb 2-1: config 0 descriptor?? [ 3223.997789][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.487350][T20571] keytouch 0003:0926:3333.0335: fixing up Keytouch IEC report descriptor [ 3224.502918][T20571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0335/input/input816 [ 3224.596660][T20571] keytouch 0003:0926:3333.0335: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3224.856131][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.914982][T14069] usb 2-1: USB disconnect, device number 37 [ 3225.017956][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:48 executing program 3: 04:52:48 executing program 0: 04:52:48 executing program 5: 04:52:48 executing program 2: 04:52:48 executing program 4: 04:52:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:48 executing program 4: 04:52:48 executing program 3: 04:52:48 executing program 2: 04:52:48 executing program 0: 04:52:48 executing program 5: 04:52:48 executing program 2: 04:52:48 executing program 0: 04:52:48 executing program 4: 04:52:48 executing program 3: 04:52:48 executing program 5: 04:52:48 executing program 2: [ 3226.056822][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3226.125932][T14069] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3226.516126][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3226.527184][T14069] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3226.536989][T14069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3226.554213][T14069] usb 2-1: config 0 descriptor?? [ 3227.047382][T14069] keytouch 0003:0926:3333.0336: fixing up Keytouch IEC report descriptor [ 3227.058575][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0336/input/input817 [ 3227.096168][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3227.152848][T14069] keytouch 0003:0926:3333.0336: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3227.494887][T14069] usb 2-1: USB disconnect, device number 38 [ 3227.896213][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:51 executing program 4: 04:52:51 executing program 0: 04:52:51 executing program 3: 04:52:51 executing program 5: 04:52:51 executing program 2: 04:52:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x38, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a1b") 04:52:51 executing program 5: 04:52:51 executing program 2: 04:52:51 executing program 4: 04:52:51 executing program 3: 04:52:51 executing program 0: [ 3228.137730][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:51 executing program 5: 04:52:51 executing program 2: 04:52:51 executing program 0: [ 3228.226005][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:51 executing program 3: 04:52:51 executing program 4: 04:52:51 executing program 5: [ 3228.735960][T19969] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3229.176153][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3229.188979][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3229.200039][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3229.212142][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.227834][T19969] usb 2-1: config 0 descriptor?? [ 3229.697901][T19969] keytouch 0003:0926:3333.0337: fixing up Keytouch IEC report descriptor [ 3229.709609][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0337/input/input818 [ 3229.791851][T19969] keytouch 0003:0926:3333.0337: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3230.154677][T10410] usb 2-1: USB disconnect, device number 39 [ 3230.238114][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:53 executing program 0: 04:52:53 executing program 3: 04:52:53 executing program 5: 04:52:53 executing program 2: 04:52:53 executing program 4: 04:52:53 executing program 2: 04:52:53 executing program 3: 04:52:53 executing program 0: 04:52:53 executing program 5: 04:52:53 executing program 4: setuid(0xee01) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 04:52:54 executing program 5: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 3230.936358][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.257663][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.286002][T19969] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3231.646084][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3231.657201][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3231.669465][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.683521][T19969] usb 2-1: config 0 descriptor?? [ 3232.167413][T19969] keytouch 0003:0926:3333.0338: fixing up Keytouch IEC report descriptor [ 3232.178267][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0338/input/input819 [ 3232.265663][T19969] keytouch 0003:0926:3333.0338: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3232.299481][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3232.617260][T19969] usb 2-1: USB disconnect, device number 40 04:52:56 executing program 0: getitimer(0x25f9541edb6882a3, &(0x7f0000000040)) 04:52:56 executing program 2: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 04:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) 04:52:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:52:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xf) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 04:52:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:56 executing program 2: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4c131a8f19efc34a) 04:52:56 executing program 0: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 04:52:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 04:52:56 executing program 2: setuid(0xee01) setresuid(0xee01, 0xee01, 0x0) 04:52:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 04:52:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r0, 0x0, 0x0) 04:52:56 executing program 5: pipe(&(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') [ 3233.336334][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:52:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 3233.846045][T14069] usb 2-1: new high-speed USB device number 41 using dummy_hcd 04:52:57 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) 04:52:57 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x800000000000}) [ 3233.976295][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.281646][T14069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3234.292621][T14069] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3234.312625][T14069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3234.325603][T14069] usb 2-1: config 0 descriptor?? [ 3234.376196][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.827055][T14069] keytouch 0003:0926:3333.0339: fixing up Keytouch IEC report descriptor [ 3234.864718][T14069] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0339/input/input820 [ 3234.962200][T14069] keytouch 0003:0926:3333.0339: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3235.282858][T19969] usb 2-1: USB disconnect, device number 41 [ 3235.416605][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:52:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x34, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5") 04:52:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00') read$FUSE(r0, 0x0, 0x0) 04:52:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 04:52:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x158}, 0x0) 04:52:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'batadv_slave_0\x00'}) 04:52:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1_to_bond\x00'}) 04:52:59 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x0, 0x0, 0x4}) 04:52:59 executing program 5: 04:52:59 executing program 3: 04:52:59 executing program 2: 04:52:59 executing program 4: 04:52:59 executing program 0: [ 3236.457671][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.506052][T19969] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3236.876124][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3236.887068][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3236.906330][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3236.916024][T19969] usb 2-1: config 0 descriptor?? [ 3237.031405][T14069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.407100][T19969] keytouch 0003:0926:3333.033A: fixing up Keytouch IEC report descriptor [ 3237.430765][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033A/input/input821 [ 3237.496180][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.524339][T19969] keytouch 0003:0926:3333.033A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3237.816152][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.854793][T14069] usb 2-1: USB disconnect, device number 42 04:53:01 executing program 5: 04:53:01 executing program 3: 04:53:01 executing program 2: 04:53:01 executing program 4: 04:53:01 executing program 0: 04:53:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:01 executing program 3: 04:53:01 executing program 5: 04:53:01 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x50, 0x13, 0xd19, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 04:53:01 executing program 4: 04:53:01 executing program 0: 04:53:01 executing program 5: [ 3238.536297][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:01 executing program 4: 04:53:01 executing program 3: 04:53:01 executing program 0: 04:53:01 executing program 2: 04:53:01 executing program 3: [ 3239.096135][T19969] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3239.506817][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3239.517854][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3239.535951][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3239.552056][T19969] usb 2-1: config 0 descriptor?? [ 3239.576206][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3240.047480][T19969] keytouch 0003:0926:3333.033B: fixing up Keytouch IEC report descriptor [ 3240.058696][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033B/input/input822 [ 3240.080939][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3240.169265][T19969] keytouch 0003:0926:3333.033B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3240.496227][T10410] usb 2-1: USB disconnect, device number 43 [ 3240.616411][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:04 executing program 5: 04:53:04 executing program 0: 04:53:04 executing program 4: 04:53:04 executing program 2: 04:53:04 executing program 3: 04:53:04 executing program 0: 04:53:04 executing program 3: 04:53:04 executing program 4: 04:53:04 executing program 2: 04:53:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x400000, 0x5, 0x0, 0xffffffffffffffff, 0x16}, 0x40) 04:53:04 executing program 5: syz_io_uring_setup(0x2b9a, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 3241.626044][T10410] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3241.656338][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.986032][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3242.001565][T10410] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3242.017026][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3242.032367][T10410] usb 2-1: config 0 descriptor?? [ 3242.527438][T10410] keytouch 0003:0926:3333.033C: fixing up Keytouch IEC report descriptor [ 3242.538951][T10410] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033C/input/input823 [ 3242.652377][T10410] keytouch 0003:0926:3333.033C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3242.707406][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3243.034938][T14180] usb 2-1: USB disconnect, device number 44 [ 3243.096132][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 04:53:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x6, 0x10, 0x0, 0x4c) 04:53:06 executing program 3: r0 = socket(0x11, 0x8000a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 04:53:06 executing program 2: io_uring_setup(0x3eb5, &(0x7f0000004040)) 04:53:06 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14e239", 0x14, 0x88, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:53:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x2, 0x0, 0x0) 04:53:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x80) 04:53:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:53:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @empty}}}) [ 3243.736851][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xff4, &(0x7f0000000100)=""/4084, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 04:53:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)='L', 0x1}, {&(0x7f0000000180)="ed72c2", 0x3}, {&(0x7f0000000200)='A', 0x1}], 0x3, &(0x7f00000004c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev}}}], 0x18}, 0x8004) [ 3244.256015][T25110] usb 2-1: new high-speed USB device number 45 using dummy_hcd 04:53:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) 04:53:07 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 04:53:07 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x73b6, 0x0, &(0x7f000084a000/0x1000)=nil, &(0x7f0000f10000/0x4000)=nil, 0x0, &(0x7f00000001c0)) 04:53:07 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14e239", 0x14, 0x2c, 0x0, @private1, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:53:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x14}, 0x0) [ 3244.776316][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3244.776379][T25110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3244.801311][T25110] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3244.814298][T25110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3244.827029][T25110] usb 2-1: config 0 descriptor?? [ 3245.317044][T25110] keytouch 0003:0926:3333.033D: fixing up Keytouch IEC report descriptor [ 3245.347604][T25110] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033D/input/input824 [ 3245.437329][T25110] keytouch 0003:0926:3333.033D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3245.783841][T14180] usb 2-1: USB disconnect, device number 45 [ 3245.827772][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.137301][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x37, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f7205a") 04:53:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000a004e2300000005ff53"], 0x10c) 04:53:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @empty}, @xdp, @l2={0x1f, 0x0, @none}, 0x4, 0x0, 0x0, 0x0, 0x100}) 04:53:09 executing program 3: r0 = socket(0x11, 0x8000a, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8940, &(0x7f0000000000)={@loopback}) 04:53:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f0000002e40)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x1c) 04:53:09 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b98816", 0xc, 0x6, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 04:53:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x12, 0x0, 0x0) 04:53:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1600bd7a, &(0x7f0000000000)={'security\x00'}, 0x4c) 04:53:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4, 0x0, 0x0) 04:53:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @multicast1}, @hci, @can}) 04:53:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x400000, 0x5, 0x0, 0xffffffffffffffff, 0xf}, 0x40) 04:53:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x49, 0x0, 0x4c) [ 3246.856178][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.936067][T14180] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3247.296140][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.307268][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3247.319961][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3247.333993][T14180] usb 2-1: config 0 descriptor?? [ 3247.425703][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.817825][T14180] keytouch 0003:0926:3333.033E: fixing up Keytouch IEC report descriptor [ 3247.828820][T14180] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033E/input/input825 [ 3247.896466][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.914278][T14180] keytouch 0003:0926:3333.033E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3248.274318][T19969] usb 2-1: USB disconnect, device number 46 04:53:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x7}, 0x2000024c, &(0x7f00000002c0)={0x0}}, 0x7ffff000) 04:53:11 executing program 2: r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 04:53:11 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14e239", 0x1c, 0x88, 0x0, @private1, @local, {[@dstopts], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:53:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0xf, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}], 0x10}, 0x0) 04:53:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x10, 0x0, 0x0) 04:53:12 executing program 4: socket(0x10, 0x3, 0x6) 04:53:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @empty}, @xdp, @l2={0x1f, 0x0, @none}, 0x4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000100)='vlan0\x00', 0x7, 0xff, 0x1}) 04:53:12 executing program 2: 04:53:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x2, 0xffffff7f}, 0x2000024c, &(0x7f00000002c0)={0x0}}, 0x0) 04:53:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x31, 0x0, 0x0) [ 3248.937173][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='net/sctp\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') 04:53:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000340)={0x2, 0x4e26, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0xfffc, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0}}], 0x2, 0x0) 04:53:12 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14e239", 0x8, 0x2c, 0x0, @private1, @local, {[], {{0x0, 0x9, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:53:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x101}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @dev}}, 0x1c) 04:53:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x8934, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @multicast1}, @can, @can}) [ 3249.178515][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3249.556006][T19969] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3249.916125][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3249.927174][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3249.936694][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3249.957781][T19969] usb 2-1: config 0 descriptor?? [ 3249.977110][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3250.437126][T19969] keytouch 0003:0926:3333.033F: fixing up Keytouch IEC report descriptor [ 3250.449850][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.033F/input/input826 [ 3250.531720][T19969] keytouch 0003:0926:3333.033F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3250.853831][T25110] usb 2-1: USB disconnect, device number 47 [ 3251.027101][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:14 executing program 4: r0 = socket(0x11, 0x8000a, 0x0) getpeername$inet6(r0, 0x0, 0x0) 04:53:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 04:53:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c}}]}, 0x78}}, 0x0) 04:53:14 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14e239", 0x7, 0x2c, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:53:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000340)={0x2, 0x4e26, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@tclass={{0x10, 0x29, 0x3}}], 0x10}}], 0x2, 0x0) 04:53:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev, 0x28}, 0x1c) [ 3251.502482][T28237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:53:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x2, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "01737be0969f4f680050babe58eb56256137cd65c61de790030567176c8267eced9e2fcc8bfdf660039dca4495d2321311b44295207ab5ddbb373a4837a92579", "55b282e2e5cd4919ca3200ce9a1459ba82d53bce75d1c2cbd91e217025c90e08"}) 04:53:14 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="60010000", @ANYRES16=r0, @ANYBLOB="c7"], 0x160}}, 0x0) 04:53:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x18}, 0x0) [ 3251.579275][T28245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:53:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4a, &(0x7f0000000000)={'security\x00'}, 0x4c) 04:53:14 executing program 2: [ 3252.056101][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3252.096021][T19969] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3252.216139][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3252.496186][T19969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3252.507237][T19969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3252.526157][T19969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3252.535789][T19969] usb 2-1: config 0 descriptor?? [ 3253.017470][T19969] keytouch 0003:0926:3333.0340: fixing up Keytouch IEC report descriptor [ 3253.028959][T19969] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0340/input/input827 [ 3253.096233][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.125413][T19969] keytouch 0003:0926:3333.0340: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3253.489123][T19969] usb 2-1: USB disconnect, device number 48 04:53:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, &(0x7f0000000e00)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000140)="9afd0c287b2909885c2ab89d5246d4f3636253383b4b7e9023c4dd4f3c3eb994ea0a56abd9d0551af5eb0a0420cae6f9308b22d5f720") 04:53:17 executing program 0: 04:53:17 executing program 5: 04:53:17 executing program 4: 04:53:17 executing program 2: 04:53:17 executing program 3: 04:53:17 executing program 2: 04:53:17 executing program 4: 04:53:17 executing program 3: 04:53:17 executing program 5: 04:53:17 executing program 0: [ 3254.142021][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:17 executing program 3: [ 3254.616063][T14180] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3254.986145][T14180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3254.997153][T14180] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3255.009451][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.019880][T14180] usb 2-1: config 0 descriptor?? [ 3255.176228][T20571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3255.266158][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3255.498339][T14180] keytouch 0003:0926:3333.0341: fixing up Keytouch IEC report descriptor [ 3255.509482][T14180] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0341/input/input828 [ 3255.591668][T14180] keytouch 0003:0926:3333.0341: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3255.938167][T25110] usb 2-1: USB disconnect, device number 49 [ 3256.216147][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:19 executing program 5: 04:53:19 executing program 0: 04:53:19 executing program 4: 04:53:19 executing program 2: 04:53:19 executing program 3: 04:53:19 executing program 0: 04:53:19 executing program 2: r0 = socket(0x11, 0x8000a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000002240)={'ip6gre0\x00', &(0x7f00000021c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}) 04:53:19 executing program 3: 04:53:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200), 0xa) 04:53:19 executing program 5: getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]) setresgid(0x0, r0, 0x0) 04:53:19 executing program 1: 04:53:19 executing program 0: 04:53:19 executing program 2: 04:53:19 executing program 4: 04:53:19 executing program 3: 04:53:19 executing program 5: 04:53:20 executing program 0: 04:53:20 executing program 2: 04:53:20 executing program 3: 04:53:20 executing program 4: 04:53:20 executing program 5: 04:53:20 executing program 0: [ 3257.016429][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:20 executing program 1: 04:53:20 executing program 3: 04:53:20 executing program 2: 04:53:20 executing program 4: 04:53:20 executing program 5: 04:53:20 executing program 0: 04:53:20 executing program 0: 04:53:20 executing program 3: 04:53:20 executing program 2: 04:53:20 executing program 5: 04:53:20 executing program 4: 04:53:20 executing program 0: [ 3257.276035][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:20 executing program 1: 04:53:20 executing program 5: 04:53:20 executing program 3: 04:53:20 executing program 2: 04:53:20 executing program 4: 04:53:20 executing program 0: 04:53:20 executing program 4: 04:53:20 executing program 2: 04:53:20 executing program 3: 04:53:20 executing program 0: 04:53:20 executing program 5: 04:53:20 executing program 4: 04:53:20 executing program 1: 04:53:20 executing program 3: 04:53:20 executing program 5: 04:53:20 executing program 2: 04:53:20 executing program 4: 04:53:20 executing program 0: 04:53:20 executing program 0: 04:53:20 executing program 4: 04:53:20 executing program 3: 04:53:20 executing program 2: 04:53:20 executing program 5: 04:53:21 executing program 4: 04:53:21 executing program 3: 04:53:21 executing program 1: 04:53:21 executing program 2: 04:53:21 executing program 5: 04:53:21 executing program 4: 04:53:21 executing program 0: 04:53:21 executing program 2: 04:53:21 executing program 3: 04:53:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x911}, 0x1c}}, 0x0) 04:53:21 executing program 3: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, r1+10000000}}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000280)) 04:53:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000), 0x4) 04:53:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 04:53:21 executing program 5: r0 = gettid() capset(&(0x7f0000000340)={0x19980330, r0}, &(0x7f0000000380)) [ 3258.297983][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.306155][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:21 executing program 1: r0 = socket(0x1, 0x1, 0x0) sendmmsg$alg(r0, &(0x7f00000084c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op], 0x18}], 0x1, 0x0) 04:53:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) 04:53:21 executing program 2: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@local}) 04:53:21 executing program 5: syz_emit_ethernet(0xfc29, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a3acd", 0x8, 0x0, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x0, 0x14}]}}}}}, 0x0) 04:53:21 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a3acd", 0x0, 0x2f, 0x0, @empty, @dev}}}}, 0x0) 04:53:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xd0, 0xf0, 0x1e8, 0x0, 0xd0, 0x2c0, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@loopback, @ipv4, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'geneve0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@loopback, @dev, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x2b) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 04:53:21 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x208001, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 04:53:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x0) 04:53:21 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a3acd", 0x18, 0x0, 0x0, @private0, @dev, {[@hopopts={0x0, 0x1, [], [@ra, @enc_lim, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) 04:53:21 executing program 5: munmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:53:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 04:53:21 executing program 2: r0 = socket(0x10, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 04:53:21 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x9}, &(0x7f0000000180)={0x0, 0x2710}) 04:53:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x1c, 0x18, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 04:53:22 executing program 1: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 04:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) 04:53:22 executing program 4: syz_emit_ethernet(0x1e81, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ad9bf", 0x1e4b, 0x2f, 0x0, @local, @local, {[@dstopts={0x0, 0x1a2, [], [@jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0xe9, "50435b318e1adc19b5da7d82bc2d757cac8dbf6c9d4590327e96d663e628ba20982ee962092b6a140b6141967ab5314dccebb0fd4070e6900f3ec29d51410829098485e0f8aba0e1f569a83608114948266a2ab2527dbdc1c7d58bd23a2e404a9fe24580b1aeb40f927f9dcf6adf33e5b027ed046688c80aada73140eacba8402a408cc9fd6cccece4e580ddf3616d5a8a9a2a3fccf0c9f06445b4efc5d4c9e6effd4837a0a678a2c049cdf2fa4767b87d538373b1ac29391907ebc21ac3545a082a10941e36cbcd8b07ea0d2d2d1e4f18f675660bf11231d51df6457d0afe6d9bd2e6afeb6264eef9"}, @pad1, @generic={0x0, 0xc16, "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"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc8, 0x0, [0x0], "9d9fcaee10fd42f0e89d10c25694d4ef3acfd0abaf4610af2fd1b7e25c09bca3fd1057cdf9161b30f9f0460b23504145af89344719a58a1341287365bd76e457199d2c2ae2c49ca0fddcd8531895ddcb1a8eb1e18937a414a6e71005b55c4e1cb06bcee3aa831b4f36fde45199b7afcf5cbe82a0da451cf25f4b5d539b687871f63065ebe2f45aeb521931c7d7f84180020461c165de3b3741d9d7528f72eb20a0112f7224fc73b986bbc73ba1ef8767787d49e64073073a2a121dd675b0e5e5ed16af38651ccb07"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0x0], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "beb380ec4a61678a9282da01488a327eca0dc6c9006fb3c1ff"}}}}}}}, 0x0) 04:53:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000), 0x4) 04:53:22 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000067a80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x4000304, 0x10002, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) [ 3259.350817][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0) 04:53:22 executing program 4: r0 = shmget(0x3, 0xc00000, 0x0, &(0x7f00003ff000/0xc00000)=nil) shmat(r0, &(0x7f0000a30000/0x2000)=nil, 0x5000) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000a30000/0x2000)=nil, 0x5000) 04:53:22 executing program 2: futex(&(0x7f00000001c0), 0x85, 0x0, 0x0, 0x0, 0x0) 04:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 04:53:22 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x453, 0x0, 0x0, 0x0, "7ab4e4c8691404e9d8b30eee72d4d4655357b53b80ee46683173d9c176920eda2392cb25064ba92e1780addddc1aae2a97de76f8552add486184594063e377e920224e16c90542fd5dab969225b6546c2ff85805a173c2e4acac04424c889a33dc8dd41b55721afff4ba21a66d53cbfaf839ab7076ede878c3317023b70f3fc179a882", ["", "", "", "", "", "", "", ""]}, 0xfe61}}, 0x0) 04:53:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 04:53:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 04:53:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)="9c594dfc68dd41882cb84778611c97af", 0x10) 04:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x20000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 04:53:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) 04:53:22 executing program 5: r0 = shmget(0x3, 0xc00000, 0x0, &(0x7f00003ff000/0xc00000)=nil) shmat(r0, &(0x7f0000a30000/0x2000)=nil, 0x5000) mlock(&(0x7f0000e0a000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r1 = shmget(0x3, 0xc00000, 0x0, &(0x7f00003ff000/0xc00000)=nil) shmat(r1, &(0x7f0000a30000/0x2000)=nil, 0x5000) 04:53:22 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x1a4d, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 04:53:22 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@empty, @random="18a9cd8b9ccc", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast1}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}, 0x0) 04:53:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 04:53:22 executing program 5: r0 = socket(0x1, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) 04:53:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005e0001"], 0x14}}, 0x0) 04:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) [ 3260.376314][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:23 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 04:53:23 executing program 2: r0 = socket(0x1, 0x1, 0x0) sendmmsg$alg(r0, &(0x7f00000084c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18}], 0x18}], 0x1, 0x0) 04:53:23 executing program 3: 04:53:23 executing program 4: mount$fuseblk(0x0, &(0x7f00000021c0)='.\x00', 0x0, 0x2400022, 0x0) 04:53:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="ac", 0x1, r0) keyctl$revoke(0x3, r1) 04:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 04:53:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) 04:53:23 executing program 4: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 04:53:23 executing program 3: r0 = socket(0x2, 0x2, 0x0) bind$alg(r0, 0x0, 0x0) 04:53:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 04:53:23 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, 0x0) 04:53:23 executing program 4: r0 = socket(0x11, 0xa, 0x0) connect$inet6(r0, 0x0, 0x0) [ 3260.612433][T28539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:53:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_delroute={0x1c, 0x19, 0x11}, 0x1c}}, 0x0) 04:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xffffff48}]}, 0x28}}, 0x0) 04:53:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002400)={0x10}, 0x10) 04:53:23 executing program 0: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) [ 3260.781931][T28552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:53:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000140)={0x9}, &(0x7f0000000180)={0x0, 0x2710}) 04:53:24 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 04:53:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_delroute={0x1c, 0x19, 0x11}, 0x1c}}, 0x0) 04:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}}, 0x0) 04:53:24 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 04:53:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:24 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a3acd", 0x8, 0x0, 0x0, @empty, @dev, {[@routing={0x2c}]}}}}}, 0x0) 04:53:24 executing program 3: r0 = socket(0x1, 0x2, 0x0) sendmsg$alg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@op={0x18}, @op={0x18}], 0x30}, 0x0) 04:53:24 executing program 4: r0 = socket(0x1, 0x2, 0x0) sendmsg$alg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1030}, 0x0) 04:53:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_delroute={0x1c, 0x19, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) 04:53:24 executing program 2: 04:53:24 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x103280, 0x0) read$FUSE(r0, &(0x7f0000004080)={0x2020}, 0x2020) 04:53:24 executing program 1: 04:53:24 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0xe1f5c7713966a4b0) 04:53:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x30}}, 0x0) 04:53:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14}}, 0x1c}}, 0x0) 04:53:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1080}}, 0x0) 04:53:24 executing program 5: 04:53:24 executing program 3: 04:53:24 executing program 5: 04:53:24 executing program 0: 04:53:24 executing program 2: 04:53:24 executing program 4: [ 3261.346202][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:24 executing program 0: [ 3261.427011][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:24 executing program 1: 04:53:24 executing program 3: 04:53:24 executing program 5: 04:53:24 executing program 4: 04:53:24 executing program 2: 04:53:24 executing program 0: 04:53:24 executing program 2: 04:53:24 executing program 5: 04:53:24 executing program 3: 04:53:24 executing program 0: 04:53:24 executing program 4: 04:53:24 executing program 5: 04:53:25 executing program 1: 04:53:25 executing program 3: 04:53:25 executing program 4: 04:53:25 executing program 2: 04:53:25 executing program 0: 04:53:25 executing program 5: 04:53:25 executing program 4: 04:53:25 executing program 5: 04:53:25 executing program 2: 04:53:25 executing program 0: 04:53:25 executing program 3: syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a3acd", 0x90, 0x0, 0x0, @remote, @dev, {[@dstopts={0x0, 0x10, [], [@generic={0x0, 0x80, "395e5a1f4e0a15cde33130b33859358f91b0e6cbf8c109e8573c603e057868b426a3bda10c05bd01b1f261db2c316130865c2c95ca8240b07dedcc1fbbacf017535feae9d71d0a1a60ff434cfb556cd04bf3a9039f0f566bd5517a9d572510fcbc9d853344d49e72839c9c8626ede61ea297350a7b0151f3086695799d32f739"}]}]}}}}}, 0x0) 04:53:25 executing program 4: 04:53:25 executing program 1: 04:53:25 executing program 0: 04:53:25 executing program 5: 04:53:25 executing program 2: 04:53:25 executing program 3: 04:53:25 executing program 4: 04:53:25 executing program 0: 04:53:25 executing program 3: 04:53:25 executing program 4: 04:53:25 executing program 2: 04:53:25 executing program 5: 04:53:25 executing program 3: [ 3262.456459][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:25 executing program 1: 04:53:25 executing program 2: 04:53:25 executing program 0: 04:53:25 executing program 4: 04:53:25 executing program 5: 04:53:25 executing program 3: 04:53:25 executing program 3: 04:53:25 executing program 2: 04:53:25 executing program 5: 04:53:25 executing program 4: 04:53:25 executing program 0: 04:53:25 executing program 2: 04:53:26 executing program 1: 04:53:26 executing program 3: 04:53:26 executing program 5: 04:53:26 executing program 0: 04:53:26 executing program 4: 04:53:26 executing program 2: 04:53:26 executing program 4: 04:53:26 executing program 2: 04:53:26 executing program 5: 04:53:26 executing program 4: 04:53:26 executing program 3: 04:53:26 executing program 0: 04:53:26 executing program 1: 04:53:26 executing program 2: 04:53:26 executing program 5: 04:53:26 executing program 0: 04:53:26 executing program 4: 04:53:26 executing program 3: 04:53:26 executing program 4: 04:53:26 executing program 0: 04:53:26 executing program 5: 04:53:26 executing program 3: 04:53:26 executing program 2: 04:53:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001b00)={'tunl0\x00', 0x0}) 04:53:26 executing program 1: socket$inet(0x2, 0x0, 0x1f) 04:53:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8918, &(0x7f0000000000)={'wg2\x00'}) 04:53:26 executing program 2: getgroups(0x1, &(0x7f0000006840)=[0x0]) 04:53:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={0x0, 0x24c}}, 0x0) 04:53:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8937, &(0x7f0000000000)={'wg2\x00'}) 04:53:26 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dri/renderD128\x00', 0x80202, 0x0) 04:53:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) [ 3263.496306][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:26 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 04:53:26 executing program 5: syz_io_uring_setup(0x4e3e, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x0, 0x3b6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000440)) 04:53:26 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x408000, 0x0) 04:53:26 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002140)='/dev/cachefiles\x00', 0x400, 0x0) [ 3263.606640][T28683] binder: 28682:28683 ioctl c018620c 0 returned -14 04:53:26 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0x0, [[0x0, 0x5]]}) 04:53:26 executing program 1: r0 = io_uring_setup(0x5613, &(0x7f0000000000)) io_uring_setup(0x7169, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 04:53:26 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x10, 0x0) 04:53:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:27 executing program 4: r0 = syz_open_dev$video(&(0x7f00000007c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000940)={0x0, 0x6, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "773a241b"}, 0x0, 0x0, @fd}) 04:53:27 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)) 04:53:27 executing program 5: socket(0x3, 0x0, 0x777) 04:53:27 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) 04:53:27 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) select(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0x9}, 0x0) 04:53:27 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)) 04:53:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 04:53:27 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 04:53:27 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x482000, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x3ff) socket$tipc(0x1e, 0x5, 0x0) io_setup(0x363a, &(0x7f0000001480)) 04:53:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:27 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'changeprofile ', '\x00'}, 0xf) 04:53:27 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:53:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4020940d, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x80}}]}, 0x24}}, 0x0) 04:53:27 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2302, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 04:53:27 executing program 5: socket(0x22, 0x0, 0x7) 04:53:27 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7cd712", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, {[@routing={0x0, 0x0, 0x0, 0x3}]}}}}}, 0x0) 04:53:27 executing program 4: openat$full(0xffffffffffffff9c, 0x0, 0x2840, 0x0) 04:53:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_getroute={0x1c, 0xf, 0x1}, 0x1c}}, 0x0) 04:53:27 executing program 5: perf_event_open(&(0x7f0000002540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@empty}}, 0xe8) 04:53:27 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x7}) 04:53:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000001) 04:53:27 executing program 4: syz_io_uring_setup(0x66bc, &(0x7f0000000000)={0x0, 0xebb6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:53:27 executing program 0: mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000000)=[0x0], 0x0) 04:53:27 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) 04:53:27 executing program 3: syz_io_uring_setup(0x4b8d, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000380)) [ 3264.537372][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:27 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, 0x0) 04:53:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') [ 3264.659109][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:27 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/ttyprintk\x00', 0xc0200, 0x0) 04:53:27 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:53:27 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 04:53:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100efffffff000000800300000005000300000000001800018014000c"], 0x34}}, 0x0) 04:53:28 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/208, 0xd0) 04:53:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 04:53:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x19, 0x0, 0x0) 04:53:28 executing program 3: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) 04:53:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x2, 0x0, "95ef84c7466fe928a2ac807a108ac42e5dcba25ba1122f3f2b7caa7b3f173512"}) 04:53:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:28 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x10) 04:53:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 04:53:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 04:53:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r0, 0x0}]) 04:53:28 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x0) 04:53:28 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x7) 04:53:28 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0xc0189436, &(0x7f0000000000)) 04:53:28 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x2, 0x0) io_setup(0x401, &(0x7f0000000140)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xf5, 0xac, 0x4d, 0x0, 0x19d2, 0x22, 0x5ca3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0xb5, 0x0, 0x4b, 0x0, 0xace, 0x2011, 0x9b7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x5a, 0x8f}}]}}]}}, 0x0) 04:53:28 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) socket$isdn(0x22, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x6c0000, 0x0) select(0x40, &(0x7f0000000380)={0x27}, 0x0, 0x0, 0x0) 04:53:28 executing program 5: select(0x0, 0x0, 0x0, &(0x7f0000003540), &(0x7f00000035c0)) 04:53:28 executing program 2: socket(0x2b, 0x80001, 0x800) 04:53:28 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x0) 04:53:28 executing program 2: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000740)=""/52) 04:53:28 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') 04:53:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 04:53:28 executing program 4: io_setup(0x363a, &(0x7f0000001480)) 04:53:28 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x2f, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 04:53:28 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) [ 3265.736602][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:29 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) 04:53:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8942, &(0x7f0000000000)={'wg2\x00'}) 04:53:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x6, 0x0, 0x300) 04:53:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0}}, 0x0) 04:53:29 executing program 1: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffff8) 04:53:29 executing program 4: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 04:53:29 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40000, 0x0) 04:53:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4fc02e3"}}) 04:53:29 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "169678", 0x78, 0x11, 0x0, @dev, @remote, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x78}], {0x0, 0x0, 0x70, 0x0, @gue={{0x2}, "8a0968d50ecdafd02a96c325f727062c0b847bc668542f8410cf1a94ab2463bfb060d6fcde9ae152a7d606ce5200107d0810b97a61789d34dae948df9ecd5ff282eebddaf31888bc6fc58bef65d02046ec3f2cf9d82a85ff41c9832d1fd8af8e"}}}}}}}, 0x0) 04:53:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 04:53:29 executing program 0: sysfs$1(0x1, &(0x7f0000002140)='%$:\x00') 04:53:29 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 04:53:29 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) 04:53:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x5, 0x5, 0x40, 0x3d}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xa, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) dup2(r2, r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 04:53:29 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 04:53:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x300, 0x0, 0x0, r0, 0x0}]) 04:53:29 executing program 1: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x4, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x4e) 04:53:29 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 04:53:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 04:53:29 executing program 3: syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x0, 0x440200) 04:53:29 executing program 2: syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) 04:53:29 executing program 5: mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0) 04:53:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 04:53:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) close(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x145042, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_VM(r0, 0xc008ae05, 0x53605d) 04:53:29 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f00000002c0)={{}, {0x0, r0/1000+60000}}, 0x0) 04:53:29 executing program 3: syz_open_dev$usbfs(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x650400) 04:53:29 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) syz_io_uring_setup(0x5c69, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000580)) [ 3266.616420][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:29 executing program 0: getgroups(0x291e38e1479bdff0, 0x0) [ 3266.776415][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:30 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000015c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 04:53:30 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40010) 04:53:30 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) read$alg(r0, &(0x7f0000000140)=""/104, 0x68) 04:53:30 executing program 3: socket(0x26, 0x5, 0x7f) 04:53:30 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 04:53:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5421, &(0x7f0000000000)={'wg2\x00'}) [ 3266.899578][T28896] Unknown ioctl -2145893024 04:53:30 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/hwrng\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 04:53:30 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x80108906, 0x0) 04:53:30 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 04:53:30 executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) 04:53:30 executing program 5: sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) 04:53:30 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) 04:53:30 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 04:53:30 executing program 3: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000000c0)) 04:53:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x40000000}) 04:53:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) 04:53:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) read$alg(r0, 0x0, 0x0) 04:53:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5428, 0x0) 04:53:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) 04:53:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 04:53:30 executing program 2: syz_emit_ethernet(0x3f1, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd628ab8dd03bb2fff00000000000000000000000000000001fc0000000000000000000000000000003b0f"], 0x0) 04:53:30 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') socketpair(0x29, 0x5, 0x0, &(0x7f0000000680)) 04:53:30 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001e80)={'batadv_slave_1\x00'}) 04:53:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:30 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000340), 0x10) 04:53:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) setns(r0, 0x0) 04:53:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 04:53:30 executing program 0: syz_genetlink_get_family_id$fou(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 04:53:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 04:53:30 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a1e6c9", 0x2c, 0x6, 0x0, @private0, @empty, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) [ 3267.586873][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001c00)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x258, 0x110, 0x258, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, ';}'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 04:53:30 executing program 3: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 04:53:30 executing program 2: nanosleep(&(0x7f0000000140), 0x0) 04:53:30 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) io_setup(0x363a, &(0x7f0000001480)) 04:53:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_SOPASS={0xead, 0x3, "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"}]}, 0xec4}}, 0x0) 04:53:30 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) [ 3267.820626][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:31 executing program 1: pkey_mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x2000000, 0xffffffffffffffff) 04:53:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000680)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5014c0) 04:53:31 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee}) 04:53:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @local, 0x6e0e}, 0x20) 04:53:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000540), 0xc, 0x0}, 0x0) 04:53:31 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '/dev/binder#\x00'}, 0x3a, 0xfffffffffffffffc) 04:53:31 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/urandom\x00', 0x200000, 0x0) 04:53:31 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 04:53:31 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) 04:53:31 executing program 2: syz_open_dev$binderN(&(0x7f0000000a80)='/dev/binder#\x00', 0x0, 0x802) 04:53:31 executing program 3: mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) 04:53:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 04:53:31 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) 04:53:31 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x107080) 04:53:31 executing program 3: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000200), &(0x7f0000bff000/0x400000)=nil, &(0x7f0000ebd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 04:53:31 executing program 0: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x1030, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) 04:53:31 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) 04:53:31 executing program 4: getrusage(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x80, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x41, &(0x7f00000009c0)={0x0, 0x3212, 0x10, 0x0, 0xdd, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000a40), &(0x7f0000000a80)) 04:53:31 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f00000010c0)='nbd\x00') 04:53:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "16168c71"}}) 04:53:31 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xc6a40, 0x0) 04:53:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_open_dev$dri(&(0x7f0000001b80)='/dev/dri/card#\x00', 0x0, 0x0) 04:53:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x51}]}, 0x24}}, 0x0) [ 3268.599533][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:53:31 executing program 1: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 04:53:31 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x6, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:31 executing program 2: getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) 04:53:31 executing program 3: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:53:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000006c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000700)) 04:53:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={0x0}}, 0x0) 04:53:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000800000000001c00000000000000000000eb0c94450000009e4b6b87ff36028e1cca2adc7858"], 0x30}}, 0x0) 04:53:31 executing program 2: socketpair(0x29, 0x0, 0x0, &(0x7f0000000680)) 04:53:31 executing program 3: remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x0, 0x0) [ 3268.727923][T29022] binder: 29016:29022 ioctl c018620c 20000700 returned -1 04:53:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vxcan1\x00', @broadcast}) 04:53:31 executing program 0: perf_event_open(&(0x7f0000002540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3268.817126][T29025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3268.856498][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:32 executing program 5: syz_emit_ethernet(0x16d, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd682a3fbd013721"], 0x0) [ 3268.878844][T29030] mmap: syz-executor.3 (29030) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 04:53:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x7, &(0x7f0000000180)={{0x0, @local, 0x0, 0x0, 'rr\x00'}}, 0x44) 04:53:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x40049409, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:32 executing program 0: write$capi20(0xffffffffffffffff, 0x0, 0x0) 04:53:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 04:53:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0xfffffdef}}, 0x0) 04:53:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 04:53:32 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 04:53:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x40) 04:53:32 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 04:53:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x545d, 0x0) 04:53:32 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x101000, 0x0) 04:53:32 executing program 3: bpf$BPF_TASK_FD_QUERY(0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 04:53:32 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:32 executing program 5: syz_io_uring_setup(0x3076, &(0x7f0000001480)={0x0, 0x54fd, 0x10, 0x0, 0x8d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001500), &(0x7f0000001540)) 04:53:32 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) 04:53:32 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x20202, 0x0) 04:53:32 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 04:53:32 executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) 04:53:32 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x2, 0x0, 0x0) 04:53:32 executing program 3: syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x2, 0x0) 04:53:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5451, 0x0) 04:53:32 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 04:53:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:32 executing program 3: request_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0xfffffffffffffffb) 04:53:32 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:32 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x541b, &(0x7f0000000000)) 04:53:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) 04:53:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x88, 0x488, &(0x7f0000000180)={{0x0, @local, 0x0, 0x0, 'rr\x00'}}, 0x44) 04:53:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x8}, 0x0) 04:53:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 04:53:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 04:53:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x0, 0xfffe}) 04:53:33 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) 04:53:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:33 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil) [ 3269.910904][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:33 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7cd712", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote}}}}, 0x0) 04:53:33 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) 04:53:33 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) 04:53:33 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 04:53:33 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 04:53:33 executing program 5: syz_emit_ethernet(0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601cda6b0014290000ae669e5b38467eaabb3100fefffffffffe"], 0x0) 04:53:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8912, &(0x7f0000000000)={'wg2\x00'}) 04:53:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x14, 0x0, 0x4, 0x2, 0x8, 0x1}, 0x40) 04:53:33 executing program 4: select(0x40, &(0x7f00000034c0), 0x0, &(0x7f0000003540), 0x0) 04:53:33 executing program 2: mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 04:53:33 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 04:53:33 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) 04:53:33 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a0001000000e4ffffffffff1b"], 0x30}}, 0x0) 04:53:33 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 04:53:33 executing program 5: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 04:53:33 executing program 3: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x29, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:33 executing program 4: [ 3270.628487][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:33 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2068f1", 0x0, 0x2f, 0x0, @private1, @ipv4={[], [], @empty}}}}}, 0x0) 04:53:33 executing program 4: bpf$BPF_TASK_FD_QUERY(0x10, 0x0, 0x0) 04:53:33 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0xd}, @func]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x21, &(0x7f00000000c0)=""/33, 0x41000, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x78) 04:53:33 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 04:53:33 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:53:33 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x1) read$alg(r0, 0x0, 0x0) 04:53:34 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:34 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) 04:53:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@increfs], 0x1, 0x0, &(0x7f0000000100)="a0"}) 04:53:34 executing program 5: io_uring_setup(0x7c06, &(0x7f00000004c0)={0x0, 0x0, 0x8}) 04:53:34 executing program 2: clone(0x4000, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)='.') 04:53:34 executing program 0: move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000fef000/0x3000)=nil], &(0x7f00000003c0), &(0x7f0000000680), 0x0) [ 3270.943330][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:34 executing program 5: epoll_create(0xff) 04:53:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0x400448c9, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61069f86"}}) 04:53:34 executing program 4: syz_open_dev$dri(&(0x7f0000001b80)='/dev/dri/card#\x00', 0x6, 0x10101) 04:53:34 executing program 3: add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 04:53:34 executing program 2: syz_emit_ethernet(0x8a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x29, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty={[0x0, 0x0, 0x2c]}}}}}}}, 0x0) 04:53:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100efffffff00000080030000000500030000000000180001"], 0x34}}, 0x0) 04:53:34 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:53:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0xf0, 0x0, 0x0, 0x1e0, 0x3d0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty}}}, {{@ipv6={@private1, @local, [], [], 'bond0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@empty}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@empty, @private0, [], [], 'caif0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@mcast2, @mcast2, [], [], 'geneve0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 04:53:34 executing program 3: syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0xffffffffffffffdc, 0x0) 04:53:34 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x29, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:34 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 04:53:34 executing program 4: request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 04:53:34 executing program 5: move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000100)=[0x101], 0x0, 0x0) 04:53:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 04:53:34 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x8980, &(0x7f0000000000)) 04:53:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfd41, r0, 0x0, 0x53, 0x0, 0x0, 0x2}]) 04:53:34 executing program 5: syz_io_uring_setup(0x41, &(0x7f00000009c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) [ 3271.552243][T29209] binder: 29207:29209 ioctl c0306201 0 returned -14 04:53:34 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xe0e615c455eefffc, 0xffffffffffffffff, 0x10000000) 04:53:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) 04:53:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8930, &(0x7f0000000000)={'wg2\x00'}) 04:53:34 executing program 0: socket(0x0, 0x632e2e37f46318df, 0x0) 04:53:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) 04:53:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20c00000}, 0xc, &(0x7f0000000880)={0x0}}, 0x0) 04:53:34 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)) 04:53:34 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 04:53:34 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, &(0x7f0000000000)) 04:53:35 executing program 5: bpf$ITER_CREATE(0x17, 0x0, 0x0) 04:53:35 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000002640)) [ 3271.976324][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:35 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0x10, 0xffffffffffffffff, 0x10000000) 04:53:35 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 04:53:35 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5421, 0x0) 04:53:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) 04:53:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000012c0)={0x0, @phonet, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @hci}) 04:53:35 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000000540)='SMC_PNETID\x00') 04:53:35 executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "6c38f5", 0x28, 0x6, 0x0, @remote, @dev={0xfe, 0x80, [], 0x22}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 04:53:35 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) 04:53:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)=@buf) 04:53:35 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000007180)) 04:53:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x8, 0x0, 0x0) 04:53:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0xf0, 0x0, 0x0, 0x1e0, 0x3d0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f00000031c0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty}}}, {{@ipv6={@private1, @local, [], [], 'bond0\x00', 'nr0\x00', {0xff}, {}, 0x33}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@empty}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0x0, 0xffffffff], [], 'caif0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xffffff00, 0xffffffff], [], 'geneve0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) getgroups(0x0, &(0x7f00000000c0)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 04:53:35 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0x10, 0xffffffffffffffff, 0x10000000) 04:53:35 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff1000/0xa000)=nil, 0x0}, 0x68) 04:53:35 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr, {[@timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}, @rr={0x7, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private, @rand_addr, @empty]}]}}}}}}, 0x0) 04:53:35 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x3a, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}}}, {{@in6=@empty}}}, &(0x7f0000000140)=0xffffffffffffff3f) 04:53:35 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x20a00) 04:53:35 executing program 0: syz_open_dev$binderN(&(0x7f0000000a80)='/dev/binder#\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000003) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004d40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000004ac0)=@framed, &(0x7f0000004b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1cf3b}, 0x78) 04:53:35 executing program 2: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 04:53:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = io_uring_setup(0x26a, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x44010, r0, 0x10000000) 04:53:35 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) close(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145042, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:53:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8905, &(0x7f0000000000)={'wg2\x00'}) 04:53:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000100)={0x18}) 04:53:35 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1800004, 0x10, 0xffffffffffffffff, 0x10000000) 04:53:35 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 04:53:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 04:53:35 executing program 5: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x2) 04:53:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x0, @local, 0x0, 0x0, 'rr\x00'}}, 0x44) [ 3272.792686][T29304] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 04:53:36 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) 04:53:36 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000002c0)={0x23, 0x0, 0x4}, 0x10) 04:53:36 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001100)='/proc/capi/capi20ncci\x00', 0x4c881, 0x0) 04:53:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x2b, 0x0, 0x0) 04:53:36 executing program 3: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) 04:53:36 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000100)) [ 3273.019683][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:36 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x2b, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 04:53:36 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 04:53:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8918, 0x0) 04:53:36 executing program 3: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 04:53:36 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000440)='/dev/dri/card#\x00', 0x100000000, 0x242000) 04:53:36 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = getpgrp(0xffffffffffffffff) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x1, 0xee00, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001580)='/dev/qrtr-tun\x00', 0x80) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000015c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001900), 0xc, 0x0}, 0x20000010) syz_io_uring_setup(0x13a2, &(0x7f0000003480)={0x0, 0xf03e, 0x2, 0x0, 0x369}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000003500), &(0x7f0000003540)) [ 3273.171176][T29330] Unknown ioctl -1067952547 04:53:36 executing program 4: io_uring_setup(0x0, &(0x7f00000000c0)) 04:53:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_open_dev$dri(&(0x7f0000001b80)='/dev/dri/card#\x00', 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002300)={'vxcan1\x00'}) 04:53:36 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x894c, 0x0) 04:53:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x6, 0xeb, &(0x7f0000000080)=""/235, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0}, 0x78) 04:53:36 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 04:53:36 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000003500), &(0x7f0000003540)) 04:53:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 04:53:36 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 04:53:36 executing program 2: bpf$ITER_CREATE(0x10, 0x0, 0x0) 04:53:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) recvmsg(r0, 0x0, 0x0) 04:53:36 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') socketpair(0x29, 0x5, 0x8, &(0x7f0000000680)) 04:53:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 04:53:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004400)={0x10, 0x0, 0x0, 0x1}, 0x40) 04:53:36 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) 04:53:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 04:53:36 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dri/renderD128\x00', 0x0, 0x0) 04:53:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x6, 0xeb, &(0x7f0000000080)=""/235, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_io_uring_setup(0x6a7d, &(0x7f0000000680), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x560c, &(0x7f0000000780)={0x0, 0x3946}) [ 3273.666504][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:36 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') 04:53:36 executing program 4: mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000000)=[0x0], 0x0) 04:53:36 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x6, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) 04:53:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x5b, &(0x7f00000000c0)=""/91, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:53:36 executing program 2: perf_event_open(&(0x7f0000002540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:53:37 executing program 3: shmat(0x0, &(0x7f0000ff8000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) 04:53:37 executing program 5: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) 04:53:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0x4020940d, 0x0) 04:53:37 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "169678", 0x10, 0x11, 0x0, @dev, @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 04:53:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, &(0x7f0000000000)={'wg2\x00'}) 04:53:37 executing program 0: getrusage(0x1, &(0x7f0000001000)) 04:53:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "b92ee4"}, 0x4) 04:53:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x60, &(0x7f0000000180)={{0x0, @local, 0x0, 0x0, 'rr\x00'}}, 0x44) 04:53:37 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) 04:53:37 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) 04:53:37 executing program 3: shmat(0x0, &(0x7f0000ff1000/0x2000)=nil, 0x9000) 04:53:37 executing program 4: select(0x40, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00000005c0)) [ 3274.056194][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:37 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') epoll_create(0x0) 04:53:37 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/input/mice\x00', 0x0) 04:53:37 executing program 4: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 04:53:37 executing program 1: select(0x40, &(0x7f00000034c0), 0x0, 0x0, &(0x7f00000035c0)) 04:53:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 04:53:37 executing program 0: syz_open_dev$usbfs(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:53:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x705}, 0x40) 04:53:37 executing program 5: select(0x40, &(0x7f00000034c0), 0x0, &(0x7f0000003540), &(0x7f00000035c0)) 04:53:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 04:53:37 executing program 0: getitimer(0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={0x0}}, 0x8000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002a00)='/proc/capi/capi20ncci\x00', 0x40082, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002a80)='batadv\x00') 04:53:37 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) waitid(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) 04:53:37 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) 04:53:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x80045440, 0x0) 04:53:37 executing program 4: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:53:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) [ 3274.675184][T29437] binder: 29436:29437 ioctl c018620c 20000040 returned -1 04:53:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89b0, &(0x7f0000000000)={'wg2\x00'}) 04:53:37 executing program 5: setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), 0xffffffa2) 04:53:37 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9a, &(0x7f0000000080)=""/154, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:53:37 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc050560f, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61069f86"}}) 04:53:37 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000680)={0x0, 0x0, 0xd}) 04:53:37 executing program 3: getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) 04:53:38 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 04:53:38 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @dev, @ipv4={[], [], @multicast2}, @empty, @loopback}}}}, 0x0) 04:53:38 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) connect$caif(r0, &(0x7f0000000680), 0x18) 04:53:38 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/autofs\x00', 0x820000, 0x0) 04:53:38 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1cda6b", 0x14, 0x4, 0x0, @loopback, @mcast1, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}}}}, 0x0) 04:53:38 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 04:53:38 executing program 1: pipe(&(0x7f0000007180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_GETXATTR(r0, &(0x7f0000009200)={0x18}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) 04:53:38 executing program 0: perf_event_open(&(0x7f0000002540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:53:38 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x404000, 0x0) io_uring_setup(0x68f1, &(0x7f0000000080)) 04:53:38 executing program 4: syz_io_uring_setup(0x13a2, &(0x7f0000003480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000003500), &(0x7f0000003540)) 04:53:38 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) 04:53:38 executing program 5: sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D'], 0x44}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x4, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x8a) [ 3275.096216][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5452, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8}, 0x40) 04:53:38 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)) 04:53:38 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r0, 0x0, &(0x7f0000000780)) 04:53:38 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00'}) 04:53:38 executing program 5: syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3f, 0x0) 04:53:38 executing program 1: syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3f, 0x201) 04:53:38 executing program 3: syz_emit_ethernet(0x3f1, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd628ab8dd03bb2f"], 0x0) 04:53:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 04:53:38 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000009c0)={0x0, 0x0}) 04:53:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x244}, 0x40) 04:53:38 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0xa) 04:53:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61069f86"}}) 04:53:38 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000000)=@raw=[@jmp, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @initr0, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @jmp], &(0x7f0000000040)='GPL\x00', 0x4, 0x9a, &(0x7f0000000080)=""/154, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:53:38 executing program 4: msgctl$MSG_INFO(0x0, 0xb, &(0x7f0000000000)=""/185) 04:53:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f0000000000)={'wg2\x00'}) 04:53:38 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1400, &(0x7f0000000740), &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) 04:53:38 executing program 2: socketpair(0x0, 0x0, 0xd7, &(0x7f0000000380)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 04:53:39 executing program 1: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080), 0x0}}, 0x0) 04:53:39 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 04:53:39 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/capi/capi20\x00', 0x103082, 0x0) 04:53:39 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000340)={0x23, 0x0, 0xfb}, 0x10) 04:53:39 executing program 0: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000006c0)=0x3b4, 0x4) syz_open_dev$binderN(&(0x7f0000000a80)='/dev/binder#\x00', 0x0, 0x802) accept4$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x800) 04:53:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001c00)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x258, 0x110, 0x258, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, ';}'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'veth0_to_bond\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 04:53:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a0001000026000000ec00001c00000000000000000000001400044c"], 0x30}}, 0x0) 04:53:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b30, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 04:53:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 04:53:39 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b40)={'team0\x00'}) 04:53:39 executing program 3: socket$isdn(0x22, 0x3, 0x42c42b3fd8f6b54d) [ 3276.136479][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.216898][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) 04:53:39 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 04:53:39 executing program 3: syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x0) 04:53:39 executing program 5: socket(0x29, 0x5, 0x7) 04:53:39 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 04:53:39 executing program 4: getrlimit(0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') 04:53:39 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x0, 0x0) 04:53:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x14}, 0x300}, 0x0) 04:53:39 executing program 0: r0 = gettid() pipe2(&(0x7f0000002e40)={0xffffffffffffffff}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 04:53:39 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 04:53:39 executing program 2: syz_genetlink_get_family_id$batadv(0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x0) 04:53:39 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 04:53:39 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$ethtool(0x0) 04:53:39 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x0) 04:53:39 executing program 1: syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2) 04:53:39 executing program 2: pipe2(&(0x7f0000007100), 0x0) 04:53:39 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) socketpair(0x2, 0x80803, 0x7f, &(0x7f0000000000)) 04:53:39 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @phonet, @vsock={0x28, 0x0, 0x0, @host}, @xdp}) 04:53:39 executing program 4: syz_open_dev$evdev(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) [ 3276.696377][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:39 executing program 4: select(0x40, &(0x7f00000034c0), &(0x7f0000003500), 0x0, &(0x7f00000035c0)) 04:53:39 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffff8) 04:53:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 04:53:39 executing program 5: getgroups(0xffffffffffffffd1, 0x0) 04:53:39 executing program 0: get_mempolicy(0x0, &(0x7f0000000380), 0x5, &(0x7f0000ffa000/0x4000)=nil, 0x3) 04:53:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x14}, 0x8}, 0x0) 04:53:40 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) 04:53:40 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0xea60}) 04:53:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}) 04:53:40 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}}) 04:53:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89a1, &(0x7f0000000000)={'wg2\x00'}) 04:53:40 executing program 4: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 04:53:40 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid_for_children\x00') 04:53:40 executing program 4: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14) 04:53:40 executing program 5: syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3f, 0x201) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x0, 0x0) 04:53:40 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/capi20\x00', 0x0, 0x0) 04:53:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000003100)={&(0x7f0000002d00), 0xc, 0x0}, 0x0) 04:53:40 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x8906, 0x0) [ 3277.176180][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0xf0, 0xd0030000, 0x0, 0x1e0, 0x3d0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty}}}, {{@ipv6={@private1, @local, [], [], 'bond0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@empty}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@empty, @private0, [], [], 'caif0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@mcast2, @mcast2, [], [], 'geneve0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 04:53:40 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80180, 0x0) 04:53:40 executing program 4: syz_genetlink_get_family_id$fou(0x0) 04:53:40 executing program 0: keyctl$reject(0x13, 0x0, 0x0, 0x6, 0x0) 04:53:40 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, 0x0) 04:53:40 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 04:53:40 executing program 5: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) select(0x40, &(0x7f0000000380), &(0x7f00000003c0)={0x2}, 0x0, 0x0) 04:53:40 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 04:53:40 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) write$snddsp(r0, 0x0, 0x0) 04:53:40 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r0, 0x5452, 0x0) 04:53:40 executing program 4: syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x2, 0x4000) 04:53:40 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 04:53:40 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvram\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) select(0x40, &(0x7f0000000380)={0x27}, &(0x7f00000003c0)={0x2}, &(0x7f0000000400)={0x9}, &(0x7f0000000440)={0x0, 0xea60}) 04:53:40 executing program 1: 04:53:40 executing program 0: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0xf10000) 04:53:40 executing program 5: 04:53:40 executing program 2: 04:53:40 executing program 4: 04:53:40 executing program 3: 04:53:41 executing program 3: 04:53:41 executing program 5: 04:53:41 executing program 2: 04:53:41 executing program 4: 04:53:41 executing program 4: 04:53:41 executing program 3: 04:53:41 executing program 1: [ 3278.217121][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:41 executing program 0: 04:53:41 executing program 5: 04:53:41 executing program 2: 04:53:41 executing program 4: 04:53:41 executing program 3: 04:53:41 executing program 1: 04:53:41 executing program 5: 04:53:41 executing program 4: 04:53:41 executing program 0: 04:53:41 executing program 3: 04:53:41 executing program 2: 04:53:41 executing program 3: 04:53:42 executing program 4: 04:53:42 executing program 5: 04:53:42 executing program 0: 04:53:42 executing program 2: 04:53:42 executing program 3: 04:53:42 executing program 1: 04:53:42 executing program 4: 04:53:42 executing program 0: 04:53:42 executing program 5: 04:53:42 executing program 3: 04:53:42 executing program 2: 04:53:42 executing program 3: 04:53:42 executing program 4: 04:53:42 executing program 5: 04:53:42 executing program 0: 04:53:42 executing program 2: 04:53:42 executing program 2: [ 3279.257295][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:42 executing program 1: 04:53:42 executing program 3: 04:53:42 executing program 4: 04:53:42 executing program 5: 04:53:42 executing program 0: 04:53:42 executing program 2: 04:53:42 executing program 2: 04:53:42 executing program 4: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 04:53:42 executing program 3: 04:53:42 executing program 5: 04:53:42 executing program 0: 04:53:42 executing program 3: 04:53:42 executing program 1: 04:53:42 executing program 2: 04:53:42 executing program 4: 04:53:42 executing program 5: 04:53:42 executing program 3: 04:53:42 executing program 0: 04:53:42 executing program 0: 04:53:42 executing program 4: [ 3279.737347][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:42 executing program 5: 04:53:42 executing program 3: 04:53:42 executing program 2: 04:53:43 executing program 0: 04:53:43 executing program 1: 04:53:43 executing program 4: 04:53:43 executing program 5: 04:53:43 executing program 2: 04:53:43 executing program 3: 04:53:43 executing program 0: 04:53:43 executing program 0: 04:53:43 executing program 4: 04:53:43 executing program 2: 04:53:43 executing program 3: 04:53:43 executing program 5: 04:53:43 executing program 0: 04:53:43 executing program 1: 04:53:43 executing program 2: 04:53:43 executing program 4: 04:53:43 executing program 3: 04:53:43 executing program 5: 04:53:43 executing program 0: [ 3280.296319][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:43 executing program 0: 04:53:43 executing program 4: 04:53:43 executing program 5: 04:53:43 executing program 3: 04:53:43 executing program 2: 04:53:43 executing program 3: 04:53:43 executing program 1: 04:53:43 executing program 2: 04:53:43 executing program 4: 04:53:43 executing program 0: 04:53:43 executing program 5: 04:53:43 executing program 3: 04:53:43 executing program 2: 04:53:43 executing program 3: 04:53:43 executing program 4: 04:53:43 executing program 5: 04:53:43 executing program 0: 04:53:43 executing program 2: 04:53:44 executing program 1: 04:53:44 executing program 3: 04:53:44 executing program 5: 04:53:44 executing program 4: 04:53:44 executing program 0: 04:53:44 executing program 2: 04:53:44 executing program 3: 04:53:44 executing program 2: 04:53:44 executing program 4: 04:53:44 executing program 5: 04:53:44 executing program 0: 04:53:44 executing program 2: 04:53:44 executing program 1: 04:53:44 executing program 5: 04:53:44 executing program 0: 04:53:44 executing program 3: 04:53:44 executing program 4: 04:53:44 executing program 2: 04:53:44 executing program 2: 04:53:44 executing program 3: 04:53:44 executing program 4: 04:53:44 executing program 5: 04:53:44 executing program 0: [ 3281.337731][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:44 executing program 3: 04:53:44 executing program 1: 04:53:44 executing program 5: 04:53:44 executing program 4: 04:53:44 executing program 2: 04:53:44 executing program 0: 04:53:44 executing program 3: 04:53:44 executing program 3: 04:53:44 executing program 4: 04:53:44 executing program 5: 04:53:44 executing program 2: 04:53:44 executing program 0: 04:53:45 executing program 2: 04:53:45 executing program 1: 04:53:45 executing program 5: 04:53:45 executing program 3: 04:53:45 executing program 4: 04:53:45 executing program 0: 04:53:45 executing program 2: 04:53:45 executing program 0: 04:53:45 executing program 5: 04:53:45 executing program 3: 04:53:45 executing program 2: 04:53:45 executing program 4: 04:53:45 executing program 4: 04:53:45 executing program 1: 04:53:45 executing program 0: 04:53:45 executing program 2: 04:53:45 executing program 3: 04:53:45 executing program 5: 04:53:45 executing program 4: 04:53:45 executing program 4: 04:53:45 executing program 0: 04:53:45 executing program 3: 04:53:45 executing program 2: 04:53:45 executing program 5: [ 3282.376765][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:45 executing program 3: 04:53:45 executing program 1: 04:53:45 executing program 3: 04:53:45 executing program 2: 04:53:45 executing program 4: 04:53:45 executing program 0: 04:53:45 executing program 5: 04:53:45 executing program 3: 04:53:45 executing program 5: 04:53:45 executing program 2: 04:53:45 executing program 0: 04:53:45 executing program 4: 04:53:45 executing program 0: [ 3282.777006][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:46 executing program 1: 04:53:46 executing program 2: 04:53:46 executing program 4: 04:53:46 executing program 3: 04:53:46 executing program 0: 04:53:46 executing program 5: 04:53:46 executing program 2: 04:53:46 executing program 5: 04:53:46 executing program 4: 04:53:46 executing program 0: 04:53:46 executing program 3: 04:53:46 executing program 5: 04:53:46 executing program 1: 04:53:46 executing program 0: 04:53:46 executing program 3: 04:53:46 executing program 2: 04:53:46 executing program 4: 04:53:46 executing program 5: 04:53:46 executing program 0: 04:53:46 executing program 4: 04:53:46 executing program 2: 04:53:46 executing program 3: 04:53:46 executing program 5: 04:53:46 executing program 0: [ 3283.417792][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:46 executing program 1: 04:53:46 executing program 2: 04:53:46 executing program 4: 04:53:46 executing program 3: 04:53:46 executing program 5: 04:53:46 executing program 0: 04:53:46 executing program 4: 04:53:46 executing program 3: 04:53:46 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x115000, 0x0) 04:53:46 executing program 0: 04:53:46 executing program 5: 04:53:46 executing program 2: 04:53:46 executing program 1: 04:53:46 executing program 4: 04:53:46 executing program 3: 04:53:46 executing program 5: 04:53:46 executing program 2: 04:53:46 executing program 0: 04:53:47 executing program 4: 04:53:47 executing program 3: 04:53:47 executing program 0: 04:53:47 executing program 2: 04:53:47 executing program 5: 04:53:47 executing program 0: 04:53:47 executing program 1: 04:53:47 executing program 2: 04:53:47 executing program 4: 04:53:47 executing program 3: 04:53:47 executing program 0: 04:53:47 executing program 5: 04:53:47 executing program 5: 04:53:47 executing program 3: 04:53:47 executing program 0: 04:53:47 executing program 2: 04:53:47 executing program 4: 04:53:47 executing program 3: 04:53:47 executing program 1: 04:53:47 executing program 5: 04:53:47 executing program 0: 04:53:47 executing program 2: 04:53:47 executing program 4: 04:53:47 executing program 3: 04:53:47 executing program 4: [ 3284.465069][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:47 executing program 5: 04:53:47 executing program 2: 04:53:47 executing program 0: 04:53:47 executing program 3: 04:53:47 executing program 4: 04:53:47 executing program 1: 04:53:47 executing program 5: 04:53:47 executing program 2: 04:53:47 executing program 4: 04:53:47 executing program 0: 04:53:47 executing program 3: 04:53:47 executing program 3: 04:53:48 executing program 4: 04:53:48 executing program 2: 04:53:48 executing program 5: 04:53:48 executing program 0: 04:53:48 executing program 3: 04:53:48 executing program 1: 04:53:48 executing program 4: 04:53:48 executing program 2: 04:53:48 executing program 5: 04:53:48 executing program 0: 04:53:48 executing program 3: 04:53:48 executing program 2: 04:53:48 executing program 5: 04:53:48 executing program 4: 04:53:48 executing program 3: 04:53:48 executing program 0: 04:53:48 executing program 5: 04:53:48 executing program 1: 04:53:48 executing program 2: 04:53:48 executing program 3: 04:53:48 executing program 0: 04:53:48 executing program 4: 04:53:48 executing program 5: 04:53:48 executing program 3: 04:53:48 executing program 2: 04:53:48 executing program 5: 04:53:48 executing program 4: 04:53:48 executing program 0: 04:53:48 executing program 3: [ 3285.496443][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:48 executing program 1: 04:53:48 executing program 5: 04:53:48 executing program 2: 04:53:48 executing program 4: 04:53:48 executing program 0: 04:53:48 executing program 3: 04:53:48 executing program 2: 04:53:48 executing program 4: 04:53:48 executing program 5: 04:53:48 executing program 3: 04:53:48 executing program 0: 04:53:48 executing program 4: [ 3285.818309][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3285.826779][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:49 executing program 1: 04:53:49 executing program 3: 04:53:49 executing program 2: 04:53:49 executing program 0: 04:53:49 executing program 4: 04:53:49 executing program 5: 04:53:49 executing program 3: 04:53:49 executing program 4: 04:53:49 executing program 5: 04:53:49 executing program 2: 04:53:49 executing program 0: 04:53:49 executing program 2: 04:53:49 executing program 1: 04:53:49 executing program 5: 04:53:49 executing program 3: 04:53:49 executing program 4: 04:53:49 executing program 0: 04:53:49 executing program 2: 04:53:49 executing program 3: 04:53:49 executing program 4: 04:53:49 executing program 2: 04:53:49 executing program 0: 04:53:49 executing program 5: 04:53:49 executing program 4: [ 3286.536512][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:49 executing program 1: 04:53:49 executing program 2: 04:53:49 executing program 0: 04:53:49 executing program 3: 04:53:49 executing program 5: 04:53:49 executing program 4: 04:53:49 executing program 4: 04:53:49 executing program 0: 04:53:49 executing program 3: 04:53:49 executing program 5: 04:53:49 executing program 2: 04:53:50 executing program 0: 04:53:50 executing program 1: 04:53:50 executing program 4: 04:53:50 executing program 2: 04:53:50 executing program 3: 04:53:50 executing program 5: 04:53:50 executing program 0: 04:53:50 executing program 0: 04:53:50 executing program 3: 04:53:50 executing program 2: 04:53:50 executing program 5: 04:53:50 executing program 4: 04:53:50 executing program 0: 04:53:50 executing program 1: 04:53:50 executing program 5: 04:53:50 executing program 3: 04:53:50 executing program 2: 04:53:50 executing program 0: 04:53:50 executing program 4: 04:53:50 executing program 2: 04:53:50 executing program 3: 04:53:50 executing program 0: 04:53:50 executing program 5: 04:53:50 executing program 4: 04:53:50 executing program 3: [ 3287.576618][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:50 executing program 1: 04:53:50 executing program 2: 04:53:50 executing program 0: 04:53:50 executing program 4: 04:53:50 executing program 5: 04:53:50 executing program 3: 04:53:50 executing program 5: 04:53:50 executing program 3: 04:53:50 executing program 0: 04:53:50 executing program 4: 04:53:50 executing program 2: 04:53:50 executing program 5: 04:53:51 executing program 1: 04:53:51 executing program 4: 04:53:51 executing program 0: 04:53:51 executing program 3: 04:53:51 executing program 2: 04:53:51 executing program 5: 04:53:51 executing program 2: 04:53:51 executing program 4: 04:53:51 executing program 0: 04:53:51 executing program 3: 04:53:51 executing program 5: 04:53:51 executing program 5: 04:53:51 executing program 1: 04:53:51 executing program 2: 04:53:51 executing program 3: 04:53:51 executing program 0: 04:53:51 executing program 4: 04:53:51 executing program 5: 04:53:51 executing program 2: 04:53:51 executing program 0: 04:53:51 executing program 5: 04:53:51 executing program 4: 04:53:51 executing program 3: 04:53:51 executing program 0: 04:53:51 executing program 1: 04:53:51 executing program 4: 04:53:51 executing program 2: 04:53:51 executing program 5: 04:53:51 executing program 3: 04:53:51 executing program 0: 04:53:51 executing program 4: 04:53:51 executing program 2: 04:53:51 executing program 3: 04:53:51 executing program 5: [ 3288.616279][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:51 executing program 0: 04:53:51 executing program 5: 04:53:52 executing program 1: 04:53:52 executing program 2: 04:53:52 executing program 4: 04:53:52 executing program 3: 04:53:52 executing program 0: 04:53:52 executing program 5: [ 3288.863355][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:52 executing program 5: 04:53:52 executing program 0: 04:53:52 executing program 4: 04:53:52 executing program 2: 04:53:52 executing program 3: 04:53:52 executing program 4: 04:53:52 executing program 1: 04:53:52 executing program 2: 04:53:52 executing program 5: 04:53:52 executing program 3: 04:53:52 executing program 0: 04:53:52 executing program 4: 04:53:52 executing program 2: 04:53:52 executing program 0: 04:53:52 executing program 3: 04:53:52 executing program 5: 04:53:52 executing program 4: 04:53:52 executing program 2: 04:53:52 executing program 1: 04:53:52 executing program 3: 04:53:52 executing program 5: 04:53:52 executing program 0: 04:53:52 executing program 2: 04:53:52 executing program 4: 04:53:52 executing program 2: 04:53:52 executing program 4: 04:53:52 executing program 0: 04:53:52 executing program 3: 04:53:52 executing program 5: 04:53:52 executing program 2: [ 3289.657954][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:52 executing program 1: 04:53:52 executing program 3: 04:53:52 executing program 4: 04:53:52 executing program 5: 04:53:52 executing program 0: 04:53:52 executing program 2: 04:53:53 executing program 3: 04:53:53 executing program 4: 04:53:53 executing program 0: 04:53:53 executing program 5: 04:53:53 executing program 2: 04:53:53 executing program 0: 04:53:53 executing program 1: 04:53:53 executing program 4: 04:53:53 executing program 5: 04:53:53 executing program 3: 04:53:53 executing program 0: 04:53:53 executing program 2: 04:53:53 executing program 2: 04:53:53 executing program 3: 04:53:53 executing program 5: 04:53:53 executing program 4: 04:53:53 executing program 0: 04:53:53 executing program 4: 04:53:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0x2c, r1, 0x7d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 04:53:53 executing program 3: 04:53:53 executing program 0: 04:53:53 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) 04:53:53 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}], 0x10}, 0x0) 04:53:53 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 04:53:53 executing program 5: r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4800) shmdt(r0) 04:53:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 04:53:53 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) 04:53:53 executing program 3: creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 04:53:53 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)) 04:53:53 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x2, 0x0) 04:53:53 executing program 3: creat(&(0x7f00000001c0)='./file0\x00', 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4800) 04:53:53 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 04:53:53 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 04:53:53 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:53:53 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$xdp(0xffffffffffffffff, 0x0, 0x0) 04:53:53 executing program 1: select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x3e37}, 0x0, &(0x7f0000000100)={0x77359400}) [ 3290.697375][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) flistxattr(r0, &(0x7f0000000000)=""/70, 0x46) 04:53:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000), 0x0) 04:53:54 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$getflags(r0, 0xb) 04:53:54 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 04:53:54 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x4030582a, 0x0) 04:53:54 executing program 4: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x3}, &(0x7f0000000100)={0x77359400}) 04:53:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r0, &(0x7f0000000080)=""/119, 0x77) 04:53:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x2}) 04:53:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 04:53:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) close_range(r0, r0, 0x0) 04:53:54 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000004c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 04:53:54 executing program 4: r0 = inotify_init1(0x0) fstat(r0, &(0x7f0000000080)) 04:53:54 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$netlink(r0, 0x0, 0x0) 04:53:54 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x7c3f66bdae3ca269) 04:53:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc020660b, 0x0) 04:53:54 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc0406619, 0x0) 04:53:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, r0, 0x0) 04:53:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 04:53:54 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 04:53:54 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x0, 0x0) 04:53:54 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) 04:53:54 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) close_range(r0, r1, 0x2) 04:53:54 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x206d81, 0x0) 04:53:54 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0xc028660f, 0x0) 04:53:54 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 04:53:54 executing program 3: creat(&(0x7f00000001c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 04:53:54 executing program 4: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 04:53:54 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004b40)={'vxcan0\x00'}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @local}, {0x0, @dev={[], 0x3f}}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'bond_slave_1\x00'}) sendfile(r5, r3, 0x0, 0x800100020001) 04:53:54 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40081) 04:53:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 04:53:54 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) fallocate(r0, 0x0, 0x0, 0x8001) 04:53:54 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) [ 3291.686743][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:53:54 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x8}) [ 3291.736756][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="52d3814e7fffff3bad6c48eff04c", 0x0, 0x8dc}, 0x28) 04:53:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup(r0) [ 3291.896261][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:55 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x88142, 0x0) 04:53:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x600a40) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 04:53:55 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x3}) 04:53:55 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 04:53:55 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 04:53:55 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004b40)={'vxcan0\x00'}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @local}, {0x0, @dev={[], 0x3f}}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 'bond_slave_1\x00'}) sendfile(r5, r3, 0x0, 0x800100020001) 04:53:55 executing program 3: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="b3", 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r0}, 0x0, 0x0, 0x0) 04:53:55 executing program 5: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) 04:53:55 executing program 0: r0 = socket(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x10) r1 = socket(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name, 0x10) bind(r0, 0x0, 0x0) 04:53:55 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20200, 0x0) 04:53:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:53:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 04:53:55 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000380)={0x0}) 04:53:55 executing program 0: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x4000, 0x0) 04:53:55 executing program 4: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x7ffa, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x40) 04:53:55 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x2200, 0x0) 04:53:55 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}, 0x1) [ 3292.774931][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 3292.816398][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:56 executing program 2: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x400) 04:53:56 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}, 0x0) 04:53:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 04:53:56 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') fcntl$getflags(r0, 0x1) 04:53:56 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x80) 04:53:56 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'L+'}, 0x16, 0x2) 04:53:56 executing program 0: socket$packet(0x11, 0x0, 0x300) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000100"/20, @ANYRES32, @ANYBLOB="19000000000000001c0012000c00010062"], 0x3c}}, 0x0) 04:53:56 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) 04:53:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x20}, 0x0) 04:53:56 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x101581, 0x0) 04:53:56 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) [ 3293.357711][T30271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:53:56 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000001200)) [ 3293.463679][T30278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:53:56 executing program 2: syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x600a40) 04:53:56 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, 0x0) 04:53:56 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)) waitid(0x0, 0x0, &(0x7f0000001280), 0x0, 0x0) 04:53:56 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 04:53:56 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 04:53:56 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 04:53:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe20000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1d6d079c4d4f58fa35d17c668a4b63e069efb297975738f538e31ec24925095a163b9d4e76be266517443db6c67e867e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6a884426d2cbdba87d5aa41e40f2d1f6082750045404b04bf97c0fea679c032b3203c6cd8bac9626bcc85e961509735a04617dc0200379e731d3a8d8fea894a4ee293001f6ce7d5b40bf2a7399423f84c6fa5f9be8173d05afe002c0e7821d406c967379e7521292d24d6c8034e2dc7c053498a9f413af569575de3b5c85546945e9bce678ee9a015abc9faac8876623db563469166acb2f206fc538450a676d71c01175b8454eb9200000000000000007219288e23eea1853f5cd830e2d8a49fc8f4b9276e9dc330c9cb1c5d708570a14546aa89e13c65896d24684e7a23bd24332eda6de5a3de1e62d8e25f853b0858122c3d1de564d84638c7f6ec477f9f0000000000000000c119b95eba4c935c80c3c33c81a68055fc8b3af4f33316cf290f90d80f1d20db08da80f7a88b63885551371ee1febf937ab5c54d69a1917e833a4103e2f68d1aa3a2138953c0c41ead2824f4ae32608b381a821fc860933a000000000000005996d42e0168a85fc6448b3f2eaab716abe53aa6c1ba9ace891ef38f9a0000000000000000000000608d6eb59bfb756a2582016e871f1bbb281acd5490a66ad91830c0da576618e1a0bcd5bd9e36c2f1d8b6b474f6c0c09d313a7fbabac0aafc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xe00, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088481fffffff00004000633a77", 0x0, 0x100, 0x6000000000000000}, 0x28) 04:53:56 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) 04:53:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 04:53:56 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) [ 3293.906397][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:57 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'L+'}, 0xffdf, 0x0) 04:53:57 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) 04:53:57 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x40106614, 0x0) 04:53:57 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'L+'}, 0x20000516, 0x0) 04:53:57 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 04:53:57 executing program 1: creat(&(0x7f00000001c0)='./file0\x00', 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 04:53:57 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, 0x0) 04:53:57 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) flistxattr(r0, &(0x7f0000000000)=""/4, 0x4) 04:53:57 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_netfilter(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x0) 04:53:57 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4800) 04:53:57 executing program 4: creat(&(0x7f00000001c0)='./file0\x00', 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 04:53:57 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x38}, 0x10) 04:53:57 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$getflags(r0, 0x3) 04:53:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) 04:53:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xe00, &(0x7f00000000c0)="b9ff0300000d698cb89e40f065581fffffff00004000633a77", 0x0, 0x100, 0x6000000000000000}, 0x28) 04:53:57 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x180000) 04:53:57 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x161042, 0x0) write$proc_mixer(r0, 0x0, 0x0) 04:53:58 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) 04:53:58 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x40286608, 0x0) 04:53:58 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '+\'.\x00'}, 0x0, 0x0) 04:53:58 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xa6800, 0x0) 04:53:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, r0, 0x0) 04:53:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x20) 04:53:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchdir(0xffffffffffffffff) 04:53:58 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:53:58 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) [ 3294.936467][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3294.944624][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:58 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xe89}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x200]}, 0x8}) 04:53:58 executing program 5: signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) 04:53:58 executing program 0: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x480840) 04:53:58 executing program 1: 04:53:58 executing program 2: io_setup(0x2c, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)={0x0}) 04:53:58 executing program 4: 04:53:58 executing program 3: 04:53:58 executing program 5: 04:53:58 executing program 0: 04:53:58 executing program 3: 04:53:58 executing program 4: 04:53:58 executing program 5: 04:53:58 executing program 3: 04:53:58 executing program 2: 04:53:58 executing program 0: [ 3295.416276][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:58 executing program 1: 04:53:58 executing program 5: 04:53:58 executing program 4: 04:53:58 executing program 0: 04:53:58 executing program 3: 04:53:58 executing program 2: 04:53:58 executing program 2: 04:53:58 executing program 0: 04:53:58 executing program 5: 04:53:58 executing program 3: 04:53:58 executing program 4: 04:53:58 executing program 0: 04:53:59 executing program 1: 04:53:59 executing program 3: 04:53:59 executing program 5: 04:53:59 executing program 4: 04:53:59 executing program 0: 04:53:59 executing program 2: 04:53:59 executing program 3: 04:53:59 executing program 4: 04:53:59 executing program 2: 04:53:59 executing program 5: 04:53:59 executing program 0: [ 3295.977121][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:53:59 executing program 3: 04:53:59 executing program 1: 04:53:59 executing program 4: 04:53:59 executing program 5: 04:53:59 executing program 2: 04:53:59 executing program 0: 04:53:59 executing program 3: 04:53:59 executing program 3: 04:53:59 executing program 0: 04:53:59 executing program 2: 04:53:59 executing program 4: 04:53:59 executing program 5: 04:53:59 executing program 3: 04:53:59 executing program 1: 04:53:59 executing program 4: 04:53:59 executing program 0: 04:53:59 executing program 2: 04:53:59 executing program 5: 04:53:59 executing program 3: 04:53:59 executing program 4: 04:53:59 executing program 2: 04:53:59 executing program 0: 04:53:59 executing program 5: 04:53:59 executing program 3: 04:53:59 executing program 2: 04:53:59 executing program 1: 04:53:59 executing program 0: 04:53:59 executing program 4: 04:53:59 executing program 5: 04:53:59 executing program 3: 04:53:59 executing program 2: 04:54:00 executing program 0: 04:54:00 executing program 2: 04:54:00 executing program 5: 04:54:00 executing program 3: 04:54:00 executing program 4: 04:54:00 executing program 4: [ 3297.016333][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:00 executing program 1: 04:54:00 executing program 0: 04:54:00 executing program 2: 04:54:00 executing program 4: 04:54:00 executing program 5: 04:54:00 executing program 3: 04:54:00 executing program 0: 04:54:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001400000000e8177be191c22d8c53b30000000000000085a33bf5eb8f355a570246031fb26dde7bbb1ec23ba77be8fb3b6058b70b4b7c44db259a8442988f9458287af8d2804368cdf9aa64b7299a6a973aae159c026e54deb8d762719ddf1e1b42c95950fc831eb9135f42886798d21d04e75920c629c412f040979253bd4cbf0c9f0aa09cbde476070b1a451bbb75f7"], 0x14}}, 0x24008810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000100"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c00010062726964676500"], 0x3c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 04:54:00 executing program 5: 04:54:00 executing program 2: 04:54:00 executing program 3: 04:54:00 executing program 3: [ 3297.263439][T30454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3297.358364][T30458] bridge1: port 1(macvlan0) entered blocking state [ 3297.364952][T30458] bridge1: port 1(macvlan0) entered disabled state [ 3297.392567][T30458] device macvlan0 entered promiscuous mode 04:54:00 executing program 1: 04:54:00 executing program 0: 04:54:00 executing program 2: 04:54:00 executing program 3: 04:54:00 executing program 5: [ 3297.405359][T30458] bridge1: port 1(macvlan0) entered blocking state [ 3297.412017][T30458] bridge1: port 1(macvlan0) entered forwarding state 04:54:00 executing program 2: 04:54:00 executing program 3: [ 3297.478324][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:54:00 executing program 4: 04:54:00 executing program 5: 04:54:00 executing program 0: 04:54:00 executing program 2: 04:54:00 executing program 3: 04:54:00 executing program 1: 04:54:00 executing program 5: 04:54:00 executing program 0: 04:54:00 executing program 4: 04:54:00 executing program 2: 04:54:00 executing program 3: 04:54:00 executing program 2: 04:54:00 executing program 0: 04:54:01 executing program 4: 04:54:01 executing program 5: 04:54:01 executing program 3: 04:54:01 executing program 0: [ 3297.977720][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:01 executing program 1: 04:54:01 executing program 4: 04:54:01 executing program 2: 04:54:01 executing program 5: 04:54:01 executing program 3: 04:54:01 executing program 0: [ 3298.056330][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:01 executing program 3: 04:54:01 executing program 4: 04:54:01 executing program 5: 04:54:01 executing program 2: 04:54:01 executing program 0: 04:54:01 executing program 4: 04:54:01 executing program 3: 04:54:01 executing program 1: 04:54:01 executing program 5: 04:54:01 executing program 2: 04:54:01 executing program 0: 04:54:01 executing program 3: 04:54:01 executing program 4: 04:54:01 executing program 3: 04:54:01 executing program 2: 04:54:01 executing program 4: 04:54:01 executing program 5: 04:54:01 executing program 0: 04:54:01 executing program 4: 04:54:01 executing program 1: 04:54:01 executing program 0: 04:54:01 executing program 5: 04:54:01 executing program 2: 04:54:01 executing program 3: 04:54:01 executing program 4: 04:54:01 executing program 2: r0 = gettid() get_robust_list(r0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) 04:54:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) 04:54:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x8]}) 04:54:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000300008020000180060001000a000700140004"], 0x34}}, 0x0) 04:54:01 executing program 4: socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002e00010029bd7000fbdbdf2504000000", @ANYBLOB="0a000300050001000500f2ff08000b"], 0x34}}, 0x0) [ 3299.039564][T30531] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 04:54:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x8]}) 04:54:02 executing program 2: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 04:54:02 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000020000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000001b7c5c4a3d24a4e400000000000000000008000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000086dd73797a6b616c6c65723000000000000074756e6c30000000000000000000000036343eb100000000000000000000000069666230000000000000000000010000000000000000000000000000ffffffffffff00000000000000002801000060010000b0010000697036000000000000000000000000000000000000000000000000000000000050000000000000000800000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000000000000000000000000000000000003a4000ffff000000000000000000006d61726b5f6d00000000000000000000000000000000000000000000000008000000000000000000000000001f00000000000000000000000000000000000000646e61740000000000000000000000000000000000000000000000000000000010000000000000004a56ca6c6dcf131279054649c5e1a62fffffffffffff000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000"/576]}, 0x290) 04:54:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x8]}) 04:54:02 executing program 4: socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:02 executing program 3: socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) [ 3299.105640][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080), 0x4) 04:54:02 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/247) 04:54:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x8]}) 04:54:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000150a0303000200000000000001000009090001"], 0x20}}, 0x0) 04:54:02 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) 04:54:02 executing program 4: socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:02 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000001080), 0x0, 0x0, &(0x7f0000001300)={0x0, &(0x7f0000001200)="6476171835e67927d3fef75bfb990320dd0079adc52a443c53fa4a7ea4469a9891cb0b37b51cfdc42506e159be2cc3f2498d989c27cf22b74c6d49d5c6f0ed432a", 0x41}) 04:54:02 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22040, 0x0) 04:54:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000780)=ANY=[], 0x1ba) 04:54:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8001) 04:54:02 executing program 4: socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x8004500f, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x8]}) 04:54:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@vsock, 0x80) 04:54:02 executing program 3: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x38) 04:54:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:03 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 04:54:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x0, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) 04:54:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) r2 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) [ 3300.136279][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002e00010029bd7000fbdbdf25040000", @ANYRES32=0x0, @ANYBLOB="0a000300050001000500f2ff08000b"], 0x34}}, 0x0) 04:54:03 executing program 5: keyctl$search(0xa, 0x0, &(0x7f00000000c0)='encrypted\x00', 0x0, 0x0) 04:54:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000080)) connect$inet6(r0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x0, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) 04:54:03 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) r2 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x18}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) [ 3300.309960][T30600] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 04:54:03 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:03 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 04:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002e00010029bd7000fbdbdf2504000000", @ANYRES32=0x0, @ANYBLOB="0a000300050001000500f2ff08000b"], 0x34}}, 0x0) 04:54:03 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000080)=""/49) [ 3300.747868][T30614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 04:54:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={0x0}}, 0x8001) 04:54:04 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:54:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="700800002400414f803e942fadea00ebff000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100746266004408020008000e00000000006b0001000014dfcfce4dc8e9609705e0378b4000515d734b8070c3f44ebf90cfe6f843a8dcc0f35e"], 0x870}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:54:04 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:04 executing program 4: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:04 executing program 5: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) [ 3300.933348][T30627] netlink: 1996 bytes leftover after parsing attributes in process `syz-executor.0'. 04:54:04 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x338, 0x338, 0x230, 0x98, 0x98, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x1]}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @multicast2, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', '\x00', {}, {}, 0x0, 0x2, 0x1}, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@set={{0x40, 'set\x00'}, {{0x3, [0x0, 0x1, 0x4, 0x2, 0x4, 0xf]}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x9, @local, 0x4e21}}}, {{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000, 0xffffff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0x0, 0xff000000, 0xffffffff, 0xff], 0x0, 0x0, 0x32, 0x0, 0x2, 0x16}, {@ipv6=@dev={0xfe, 0x80, [], 0x1f}, [0xff, 0xffffffff, 0x0, 0xffffffff], @ipv4=@private=0xa010101, [0xff, 0xff, 0xffffff00, 0xffffff00]}, {@ipv4=@dev, [0xff, 0xff], @ipv4=@loopback, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x4d5}, {@ipv4=@multicast2, [0xffffff], @ipv4=@local, [0x0, 0x0, 0x0, 0xffffff00]}], 0xb, 0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) [ 3300.984940][T30627] netlink: 1996 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3301.016302][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3301.138103][T30627] netlink: 1996 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3301.173263][T30627] netlink: 1996 bytes leftover after parsing attributes in process `syz-executor.0'. 04:54:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7ff}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:04 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) [ 3301.185501][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:04 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}) 04:54:04 executing program 2: r0 = gettid() unshare(0x28020400) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs$namespace(r0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid_for_children\x00') 04:54:04 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/hwrng\x00', 0x0, 0x0) write$input_event(r0, 0x0, 0x0) 04:54:04 executing program 2: 04:54:04 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7ff}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:04 executing program 1: 04:54:04 executing program 5: 04:54:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7ff}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:04 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x338, 0x338, 0x230, 0x98, 0x98, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@dev, @multicast2, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@set={{0x40, 'set\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 04:54:04 executing program 2: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) 04:54:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r0, 0x1, 0x41, &(0x7f0000000080), 0x4) 04:54:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7ff}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:05 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:05 executing program 5: 04:54:05 executing program 2: 04:54:05 executing program 1: 04:54:05 executing program 5: 04:54:05 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:05 executing program 0: 04:54:05 executing program 2: 04:54:05 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff7fff, 0x7d7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8182, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000480)=0x80) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x400082c) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0xfffffffffffff800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair(0xb, 0x1, 0x2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@dev}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x7ff}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}}, 0xe8) 04:54:05 executing program 0: [ 3302.217030][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:05 executing program 5: 04:54:05 executing program 2: 04:54:05 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:05 executing program 4: 04:54:05 executing program 2: 04:54:05 executing program 5: 04:54:05 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:05 executing program 0: 04:54:05 executing program 1: 04:54:05 executing program 4: 04:54:05 executing program 2: 04:54:05 executing program 5: 04:54:05 executing program 2: 04:54:05 executing program 4: 04:54:05 executing program 0: 04:54:05 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:05 executing program 4: 04:54:05 executing program 5: 04:54:06 executing program 1: 04:54:06 executing program 2: 04:54:06 executing program 0: 04:54:06 executing program 4: 04:54:06 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:06 executing program 5: 04:54:06 executing program 0: 04:54:06 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:06 executing program 2: 04:54:06 executing program 4: 04:54:06 executing program 5: 04:54:06 executing program 0: 04:54:06 executing program 1: 04:54:06 executing program 4: 04:54:06 executing program 2: 04:54:06 executing program 5: 04:54:06 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:06 executing program 0: [ 3303.256214][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:06 executing program 0: 04:54:06 executing program 4: 04:54:06 executing program 5: 04:54:06 executing program 2: 04:54:06 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:06 executing program 0: 04:54:06 executing program 1: 04:54:06 executing program 4: 04:54:06 executing program 5: 04:54:06 executing program 2: 04:54:06 executing program 0: 04:54:06 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:06 executing program 2: 04:54:06 executing program 4: 04:54:06 executing program 0: 04:54:06 executing program 5: 04:54:07 executing program 5: 04:54:07 executing program 0: 04:54:07 executing program 4: 04:54:07 executing program 1: 04:54:07 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:07 executing program 2: 04:54:07 executing program 5: 04:54:07 executing program 0: 04:54:07 executing program 4: 04:54:07 executing program 5: [ 3304.065761][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x10) 04:54:07 executing program 2: openat$hwrng(0xffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x109200, 0x0) 04:54:07 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:07 executing program 0: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="97", 0x1, 0xfffffffffffffffc) 04:54:07 executing program 5: utimensat(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x0, 0x0) [ 3304.296305][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="100400001f000100000000000000a12881af01010000000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000a8"], 0x410}}, 0x0) 04:54:07 executing program 2: socketpair(0x2, 0x0, 0x47d, 0x0) 04:54:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f000000b340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000240)=[0x0, 0x7ff]) 04:54:07 executing program 0: 04:54:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000047c0)=[{&(0x7f0000002540)="c781a3d8a34e1c70dcc44fd800a9e6e22fd9794abdd44f4058a6c56c181ace4c5fd1ea8818f25bbd79f8ae68fda46e04fac8a641382e0af9449594573f533932e3e9bcc311af063b507bc31947f244cf04a419a3297de3c9a04016fd7bd6856a6846e8961bc8743b28205f87e0b012f515171aec08eb97c27402806d8d40723d2359c44d74009a883c2d", 0x8a}, {&(0x7f0000002600)="5781239298609cd882f6f837604e838e83ff3ddb5938b18863554f418d5b29e588bfcdbd30f9550a3c8ee1d7438ff80e23ef254d86559b31aa829fea4ed7ab827177b0eba999cf108fc0b5b05c980ce49ce4d3bd7f448d1d69bf135daee297316d7b35b6244cc61e3c1482955518bd6891759cf56c2bd2f489de97b1ec8244f20831d63e66018e36745452d25f65bf732559cb1b46cfc9c41fdb41dbe5b3f9b5680e1bed36ccad9634d396ba7e6c70a82c58de0c24a7c953416087d3c1fc929803df06ccccd5d0656fa7db96711fac234c00f65848e3efb5c8d2c3a8e2aa45a15f42", 0xe2}, {&(0x7f0000002700)="e624a5fc9aa51204ea8169af6a3fb6c20d39e286e3b86d80ddbcd3124ca064c1a27741ac1144748712f189bda78d5a9e5e6006bb82ff9a366369218e33f6040795e1", 0x42}, {&(0x7f0000002780)="cf6f26f2178ec603379b28ff1c99dde9c3c12bd72c2faaa45b", 0x19}, {&(0x7f00000027c0)="a7653716d4a76f0cd231c7f2195b8be02a394440e8f6a2db9b3b2b3817479a7a3e44f8160be60dcad2a5f8dd8d4b8b97776fa8addc11bf7dea1a8cad4ba51ec7a6541a8a7947461058a11f7b07f940b0e4925c729a84cc66ccfe5c4af0d61e185e8d9bcf4c07b52f545af6ca304c87074d26b42d17e3cdeed54f9c028da6876fa5791f82df849fe5492056092f2fd0d292a1c305082b6a6e4fc35f70aca14585e1f01e84367d6986cba625b123f85be8285dd40694e9a89841c1bce89c239f7ed04a918c1e08e943f704c6561ba408da46a1bf90dbe4b49d106d604212f5a186f47cce2fbd28ba96ea49d2a1280c1c2181e9a35cdc4371a660a4cf38415af4ec4c9099777200efbcbb1d872bc8eeca57c47fe82e0f0c08bd8f61b4c730f4b5c391b39c9a902a83fd0581c4ea06d47893cf488086f7e2299dc2e1c8e703dbd2e132a8192a4cc66096286d8b035e364eb896b7e4da3f29a4df1c3d3e034fc579843d02fb1c85f832aefdfd6cd880a6fb6adf7ccab052e15dcdecbdec6c6725b9b2da41b093c5c9cf5032c858cdd9cb0d89fddced74d4b1e304a4bd45afd44a759f9b56c19f47e4101e68042b6e8b99d812327725f11bf0fbd6f774d37d902f1c03b27c9f358d67aaa42bdac49cee69f0754f36b93867b47908f01a50c64d74edeccafc69925484c75fe2b2cda2b6ad4f78b21df5d2a0968c64162e68d0336af341c77e84486fe02ef3100f0e0fef03672eced27351e5f2deac90cd69288f8a90429971912ca2961ff9464c084222ce5316ca4c359c35c78dec1f94b5bbef0d69594b95624ff51dd5402c88e500822bdbee7a1092ddec779d8cc6d211e735555ef61ececdb981af357710e430575fdaa5a4be8242e41327d4cee9283683201a2039aed792d5975fac3072e49b7ab8f3bd302182ee8ca48446b96abf76a372f893b3de186666bc1bc13ca6c3394da915fa5a32f8c85b23134adc1dc54f1b44a9b236a0ce4771f8d01f5030ed3f03c917376a2966aab7185a5580f4c7dd524376d895ee6eb898bc079ac329462480f51e467f8e8d0172bdbff2162242227944fc323069d0a12b500a1d580b3ce08cc88f531c9e9c85193117796fb5cdf7ab328f8237785f5f915ace36d5b0562485cd9865d6e358026c1057332f67a68f1a37c3544792997cf2c4ef5d7836f135ddc70c2feb43eef23e9367c435e5fbc1275a7718287e148805dddb3458aa4dfedad500ac227506fddcc58a6cc5d8c5ab604c149e37575a1cd20e9625d950ae133d5898aef0822e5e8ab8c1fd6e113bcb9e558ad4f0d83bac3b53041a6e26f5c2d4d9c1b02a6ac2f3a69060fade79e4c788122299385c2d154d5456c247da899dcfc23f1391b36a7f9953569d0c0e1c5aa72982ca11abd9f96f80e8ab88494c95b71d50ffd671dce38c4aa00c3f816ff6f8ca6bbee1d64f2d4956cddd5a1b4eb0ad131d", 0x40e}], 0x5}}], 0x1, 0x0) 04:54:07 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:07 executing program 0: syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x800, 0x149240) 04:54:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 04:54:07 executing program 5: clock_gettime(0x2, &(0x7f0000000200)) 04:54:07 executing program 2: openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') socket$nl_generic(0x10, 0x3, 0x10) 04:54:07 executing program 0: openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x329643, 0x0) 04:54:07 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:08 executing program 1: r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 04:54:08 executing program 5: add_key$user(&(0x7f0000000940)='user\x00', &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)='j', 0x1, 0x0) 04:54:08 executing program 4: setregid(0xffffffffffffffff, 0x0) setregid(0x0, 0x0) 04:54:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x22bb}]}) 04:54:08 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 04:54:08 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) [ 3304.817661][T30789] netlink: 808 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3304.827221][T30789] netlink: 808 bytes leftover after parsing attributes in process `syz-executor.1'. 04:54:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 04:54:08 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:08 executing program 2: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xc44) 04:54:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007c40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x20, 0x29, 0x32, {@private1}}}], 0x20}}], 0x1, 0x0) 04:54:08 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000840)='./file0\x00', 0x0) [ 3305.016293][T19969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:08 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7}, 0x7) 04:54:08 executing program 1: pselect6(0x40, &(0x7f0000000f40), 0x0, &(0x7f0000000fc0)={0x4}, &(0x7f0000001000)={0x0, 0x3938700}, 0x0) 04:54:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@mcast2}, 0x14) 04:54:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000047c0)=[{&(0x7f0000002540)="c7", 0x1}], 0x1}}], 0x1, 0xc814) 04:54:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x23, &(0x7f0000000440)={0x0, 0xffffffffffffff08}}, 0x0) 04:54:08 executing program 3: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@mcast1, 0x800004e}) 04:54:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:08 executing program 4: timer_create(0x0, &(0x7f0000000040)={0x0, 0x21}, &(0x7f0000000080)) 04:54:08 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 04:54:08 executing program 5: openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x18dc43, 0x0) 04:54:08 executing program 2: pselect6(0x40, &(0x7f00000061c0), &(0x7f0000006200), &(0x7f0000006240)={0x8001}, 0x0, 0x0) [ 3305.337061][T10410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:08 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x5}, 0x0, 0x0, 0x0) 04:54:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000047c0)=[{&(0x7f0000002540)="c781a3d8a34e1c70dcc44fd800a9e6e22fd9794abdd44f4058a6c56c181ace4c5fd1ea8818f25bbd79f8ae68fda46e04fac8a641382e0af9449594573f533932e3e9bcc311af063b507bc31947f244cf04a419a3297de3c9a04016fd7bd6856a6846e8961bc8743b28205f87e0b012f515171aec08eb97c27402806d8d40723d2359c44d74009a883c2d", 0x8a}, {&(0x7f0000002600)="5781239298609cd882f6f837604e838e83ff3ddb5938b18863554f418d5b29e588bfcdbd30f9550a3c8ee1d7438ff80e23ef254d86559b31aa829fea4ed7ab827177b0eba999cf108fc0b5b05c980ce49ce4d3bd7f448d1d69bf135daee297316d7b35b6244cc61e3c1482955518bd6891759cf56c2bd2f489de97b1ec8244f20831d63e66018e36745452d25f65bf732559cb1b46cfc9c41fdb41dbe5b3f9b5680e1bed36ccad9634d396ba7e6c70a82c58de0c24a7c953416087d3c1fc929803df06ccccd5d0656fa7db96711fac234c00f65848e3efb5c8d2c3a8e2aa45a15f42749a59d72b28780471d863a980431f", 0xf1}, {&(0x7f0000002700)="e624a5fc9aa51204ea8169af6a3fb6c20d39e286e3b86d80ddbcd3124ca064c1a27741ac1144748712f189bda78d5a9e5e6006bb82ff9a366369218e33f6040795e1", 0x42}, {&(0x7f0000002780)="cf6f26f2178ec603379b28ff1c99dde9c3c12bd72c2faaa45b", 0x19}, {&(0x7f00000027c0)="a7653716d4a76f0cd231c7f2195b8be02a394440e8f6a2db9b3b2b3817479a7a3e44f8160be60dcad2a5f8dd8d4b8b97776fa8addc11bf7dea1a8cad4ba51ec7a6541a8a7947461058a11f7b07f940b0e4925c729a84cc66ccfe5c4af0d61e185e8d9bcf4c07b52f545af6ca304c87074d26b42d17e3cdeed54f9c028da6876fa5791f82df849fe5492056092f2fd0d292a1c305082b6a6e4fc35f70aca14585e1f01e84367d6986cba625b123f85be8285dd40694e9a89841c1bce89c239f7ed04a918c1e08e943f704c6561ba408da46a1bf90dbe4b49d106d604212f5a186f47cce2fbd28ba96ea49d2a1280c1c2181e9a35cdc4371a660a4cf38415af4ec4c9099777200efbcbb1d872bc8eeca57c47fe82e0f0c08bd8f61b4c730f4b5c391b39c9a902a83fd0581c4ea06d47893cf488086f7e2299dc2e1c8e703dbd2e132a8192a4cc66096286d8b035e364eb896b7e4da3f29a4df1c3d3e034fc579843d02fb1c85f832aefdfd6cd880a6fb6adf7ccab052e15dcdecbdec6c6725b9b2da41b093c5c9cf5032c858cdd9cb0d89fddced74d4b1e304a4bd45afd44a759f9b56c19f47e4101e68042b6e8b99d812327725f11bf0fbd6f774d37d902f1c03b27c9f358d67aaa42bdac49cee69f0754f36b93867b47908f01a50c64d74edeccafc69925484c75fe2b2cda2b6ad4f78b21df5d2a0968c64162e68d0336af341c77e84486fe02ef3100f0e0fef03672eced27351e5f2deac90cd69288f8a90429971912ca2961ff9464c084222ce5316ca4c359c35c78dec1f94b5bbef0d69594b95624ff51dd5402c88e500822bdbee7a1092ddec779d8cc6d211e735555ef61ececdb981af357710e430575fdaa5a4be8242e41327d4cee9283683201a2039aed792d5975fac3072e49b7ab8f3bd302182ee8ca48446b96abf76a372f893b3de186666bc1bc13ca6c3394da915fa5a32f8c85b23134adc1dc54f1b44a9b236a0ce4771f8d01f5030ed3f03c917376a2966aab7185a5580f4c7dd524376d895ee6eb898bc079ac329462480f51e467f8e8d0172bdbff2162242227944fc323069d0a12b500a1d580b3ce08cc88f531c9e9c85193117796fb5cdf7ab328f8237785f5f915ace36d5b0562485cd9865d6e358026c1057332f67a68f1a37c3544792997cf2c4ef5d7836f135ddc70c2feb43eef23e9367c435e5fbc1275a7718287e148805dddb3458aa4dfedad500ac227506fddcc58a6cc5d8c5ab604c149e37575a1cd20e9625d950ae133d5898aef0822e5e8ab8c1fd6e113bcb9e558ad4f0d83bac3b53041a6e26f5c2d4d9c1b02a6ac2f3a69060fade79e4c788122299385c2d154d5456c247da899dcfc23f1391b36a7f9953569d0c0e1c5aa72982ca11abd9f96f80e8ab88494c95b71d50ffd671dce38c4aa00c3f816ff6f8ca6bbee1d64f2d4956cddd5a1b4eb0ad131d0e64a88ec1bc1c4ce014cddeb970bce59205983ed11280dcbca44a7a69e6152205d16e3298c746d4d726f0001c72faba852fd34dea57f0d8b616e1344946c8863c0665876b1d89505474a69fc16948bb4df66ac836611fc15bd444f40ab12bc1a5e7fbf2666ef7bb87c42613758e64654345940732a073e583b212e007cd2f9f2a68848df751999b83446d0569034ac1f1f985e47e53a78d0229f7f73b4eca31784f016b1899b3f090e14138ddf82937b7cff9387c7555c5d70ac2a93c2763b8c657ba9f1128752824ac70110cbdeae279c269464016f9ff8610f0aa97139ae7b2ec939a669ef3c7a21547bfef07b0b103deeed7439fa80bdcb203babc9f0ec5c6f0d99fab515ca1aafa1f6a69f556c553af32f000ba8c3c9c11020ce28388f34fbb6c42f5ea6dd55db06c28ccac5cedb7f43f26cb54cee097016d14811290403a14bcd4bfa816e3efd85804ae8e42fab7a5d706b3bc27a6a960b0862b8af89cd8eb92efe16879993110a23ca03c41adf91e475a84c03d2e91371b4a994327c93c269e967443f7a614eb59a1fb3e9083e7bd010080bb41f713ba35a3e2310f7aad34e7772311bb6cc3e724b91e96c5e259f7638a70f574e7493b2e3f13b2f9d55a2dd5f61542ffc18bafcf6d09883b01ef1eb2d77120bf9a01745a834e645598d2fbf1c7d0f9d7f66e984cbc48ec9d6fd78b2740d5b9a20e36c90b0a94c9c861db6ea1e17dd3ffa2e95597ca43cfc2a7fd231eeeedffa71ee88584bd3a2b346a570719b28953102a48ab2e5db30c055305fb9566b276d2185ea7fc01dfeafc5cc328d123b315f5db201970630d4b7d4f221163ea1d1676f33e0a2609b1c1ab515f603398c3d00808ba763e6af7e7708aa1702a63026145353e7c8a0b22b55f477e6751df22ca941555823837bc93fdacf80f7489ed651cadbdf61fa3e8c3c5cc8a4c456d1e090c966bba59f70c2bec5c7018fc1dd842d3164007db2f6b49576bca54eac9f868b1fcac6f4ea4cd77183d1bef340796882783749d90d73b3928666974abaa290abb42df6f79c3869926479257e06f1b7886d920668f880a121d16bed9f640d989aa33ef7702e903bd017f30d4a61d56d399d6adacffd4f1a68789ffb8c230176327ccca5896907b250ead2dc14d5ac88253963b3955c5704ef3b8409895fb04a63d742ea567ec088f9b003bb10014c25b21d18d23d32d031b11433ffbb00f3b7ab720ee5e7590fe0887ff0191503352500ca519bc8221ed7fdbbf460eb31f4e7037a2e6aaa457b87fa3163bbe8d1c34f1ab2c16c296b94a4dd437c1b5e4333104480b8616facd312bbe7d726153f82945afb5f61c40848104c7c4480207dd8652dc0427e2437c6cacf7508911af6e8a36964234c7bae8e7f4415564b986a84b8e2f3c6ece3f8c15ccbc0f246b752b656b01cffc14125cf49613d47b79ce0381d6e449c0441fae1ed0f5770e226366354e70f36f1eb6159bfc935bac05cbbb5f559424867d1a095d2da777a8b2903350d6fe294124dce5f5d0bde1a91e881e539f79c12e88f59db20ebdcb4468d96bb4a7b4733e3ab0fbb5d1f0766edc937ee8c1fd0b2725ee17fcc6c30e665dea9e0ee399a0a6721bafbc3373df061b44da87637a55504819362df3d2e0bbdb7465962088954ae3ab8341b4dc663f0de1403229cccb458726a405c89cf64824a0024aa7f88616ad1fac8fdd7d1ddda5fa16c8324d6a2c3587376cf18f69357266093ecb881a80b2ee6631cbf475b8dbf1d1391e4becc46cff777ce5a13a65d843740d673cec338e712750db99475c69d8933472026d89560b1f87e1f283ec7897a74654ed25519c748bf8763bbfccf8eb5ccfe74a1d63bec2848cb43aae4ae10d614386d808c216545542859411eb535cb93d0b19dd99bbe8637e1c184f388a8da496da799927be1000b0d0247ca43aa8b2f4", 0x973}], 0x5}}], 0x8000000, 0x8c0) 04:54:08 executing program 2: r0 = openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 04:54:08 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000012c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 04:54:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000047c0)=[{&(0x7f0000002540)="c781a3d8a34e1c70dcc44fd800a9e6e22fd9794abdd44f4058a6c56c181ace4c5fd1ea8818f25bbd79f8ae68fda46e04fac8a641382e0af9449594573f533932e3e9bcc311af063b507bc31947f244cf04a419a3297de3c9a04016fd7bd6856a6846e8961bc8743b28205f87e0b012f515171aec08eb97c27402806d8d40723d2359c44d74009a883c2d", 0x8a}, {&(0x7f0000002600)="5781239298609cd882f6f837604e838e83ff3ddb5938b18863554f418d5b29e588bfcdbd30f9550a3c8ee1d7438ff80e23ef254d86559b31aa829fea4ed7ab827177b0eba999cf108fc0b5b05c980ce49ce4d3bd7f448d1d69bf135daee297316d7b35b6244cc61e3c1482955518bd6891759cf56c2bd2f489de97b1ec8244f20831d63e66018e36745452d25f65bf732559cb1b46cfc9c41fdb41dbe5b3f9b5680e1bed36ccad9634d396ba7e6c70a82c58de0c24a7c953416087d3c1fc929803df06ccccd5d0656fa7db96711fac234c00f65848e3efb5c8d2c3a8e2aa45a15f42749a59d72b28780471d863a980431f", 0xf1}, {&(0x7f0000002700)="e624a5fc9aa51204ea8169af6a3fb6c20d39e286e3b86d80ddbcd3124ca064c1a27741ac1144748712f189bda78d5a9e5e6006bb82ff9a366369218e33f6040795e1", 0x42}, {&(0x7f0000002780)="cf6f26f2178ec603379b28ff1c99dde9c3c12bd72c2faaa45b", 0x19}, {&(0x7f00000027c0)="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", 0x973}], 0x5}}], 0x1, 0x8000) 04:54:08 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0x0) 04:54:08 executing program 4: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 04:54:08 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @dev, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "0000fb", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) 04:54:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x40, 0x0, &(0x7f0000000000)) 04:54:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000290000e103000000000000000000000010000000290000000b00000000000005140000002900000036000000000000000000000010"], 0x48}}], 0x1, 0x0) 04:54:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:09 executing program 0: socketpair(0x2, 0x1, 0x3, 0x0) 04:54:09 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x100) 04:54:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x20, 0x29, 0x32, {@empty}}}], 0x20}, 0x0) 04:54:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts={{0x14}}], 0x14}}], 0x2, 0x0) 04:54:09 executing program 2: r0 = openat$uinput(0xffffff9c, &(0x7f000000b300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 04:54:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:09 executing program 0: timer_create(0x0, &(0x7f0000000040), 0x0) 04:54:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001100)=[{{&(0x7f0000002500)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private0, 0x8000}, 0x1c, 0x0}}], 0x2, 0x0) 04:54:09 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000551) 04:54:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:09 executing program 4: openat$ptmx(0xffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x101001, 0x0) 04:54:09 executing program 5: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) 04:54:09 executing program 2: openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) [ 3306.376508][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 04:54:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x2, &(0x7f0000001c40)={@ipv4={[], [], @remote}}, 0x14) 04:54:09 executing program 0: timer_create(0x2, 0x0, &(0x7f00000000c0)) 04:54:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@getae={0xe8, 0x1f, 0x1, 0x0, 0x0, {{@in6=@private2}, @in6=@private2}, [@policy={0xa8, 0x7, {{@in6=@ipv4={[], [], @local}, @in6=@mcast2}}}]}, 0xe8}}, 0x0) 04:54:09 executing program 4: socketpair(0x2, 0x3, 0x1, 0x0) [ 3306.499444][T30894] ================================================================== [ 3306.508132][T30894] BUG: KASAN: slab-out-of-bounds in xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.515778][T30894] Write of size 4 at addr ffff8880256af2ec by task syz-executor.5/30894 [ 3306.524102][T30894] [ 3306.526455][T30894] CPU: 1 PID: 30894 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 3306.535235][T30894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3306.545302][T30894] Call Trace: 04:54:09 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) 04:54:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) [ 3306.548679][T30894] dump_stack+0x107/0x163 [ 3306.553043][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.558003][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.562997][T30894] print_address_description.constprop.0.cold+0xae/0x4c8 [ 3306.570145][T30894] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 3306.575584][T30894] ? vprintk_func+0x95/0x1e0 [ 3306.580235][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.585195][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.590150][T30894] kasan_report.cold+0x1f/0x37 [ 3306.594932][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 04:54:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x80, [0x74]}) 04:54:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0xc8, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x2bc, 0x2bc, 0x2bc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'netpci0\x00', 'erspan0\x00'}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'macsec0\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384) [ 3306.599940][T30894] check_memory_region+0x13d/0x180 [ 3306.605074][T30894] memset+0x20/0x40 [ 3306.608900][T30894] xfrm_attr_cpy32+0x15a/0x1d0 [ 3306.613696][T30894] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 3306.619363][T30894] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 3306.624790][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3306.630869][T30894] ? security_capable+0x8f/0xc0 [ 3306.635754][T30894] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 3306.641065][T30894] xfrm_user_rcv_msg+0x55b/0x8b0 [ 3306.646023][T30894] ? xfrm_do_migrate+0x800/0x800 [ 3306.650989][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3306.657002][T30894] ? lock_release+0x710/0x710 [ 3306.661778][T30894] ? __local_bh_enable_ip+0x9c/0x110 [ 3306.667127][T30894] ? __mutex_lock+0x626/0x10e0 [ 3306.671987][T30894] netlink_rcv_skb+0x153/0x420 [ 3306.676775][T30894] ? xfrm_do_migrate+0x800/0x800 [ 3306.681726][T30894] ? netlink_ack+0xaa0/0xaa0 [ 3306.686412][T30894] xfrm_netlink_rcv+0x6b/0x90 [ 3306.691124][T30894] netlink_unicast+0x533/0x7d0 04:54:09 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x7}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) [ 3306.695910][T30894] ? netlink_attachskb+0x810/0x810 [ 3306.701083][T30894] ? __phys_addr_symbol+0x2c/0x70 [ 3306.706169][T30894] ? __check_object_size+0x171/0x3f0 [ 3306.711472][T30894] netlink_sendmsg+0x856/0xd90 [ 3306.716260][T30894] ? netlink_unicast+0x7d0/0x7d0 [ 3306.721290][T30894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3306.726616][T30894] ? netlink_unicast+0x7d0/0x7d0 [ 3306.733208][T30894] sock_sendmsg+0xcf/0x120 [ 3306.737673][T30894] ____sys_sendmsg+0x6e8/0x810 [ 3306.742461][T30894] ? kernel_sendmsg+0x50/0x50 04:54:09 executing program 1: socket(0x2, 0xa, 0x5) [ 3306.747155][T30894] ? do_recvmmsg+0x6c0/0x6c0 [ 3306.751772][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3306.757793][T30894] ___sys_sendmsg+0xf3/0x170 [ 3306.762398][T30894] ? sendmsg_copy_msghdr+0x160/0x160 [ 3306.767726][T30894] ? __fget_files+0x272/0x400 [ 3306.772424][T30894] ? lock_downgrade+0x6d0/0x6d0 [ 3306.777286][T30894] ? find_held_lock+0x2d/0x110 [ 3306.782086][T30894] ? __fget_files+0x294/0x400 [ 3306.786791][T30894] ? __fget_light+0xea/0x280 [ 3306.791440][T30894] __sys_sendmsg+0xe5/0x1b0 [ 3306.795960][T30894] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3306.801061][T30894] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 3306.807674][T30894] __do_fast_syscall_32+0x56/0x80 [ 3306.812740][T30894] do_fast_syscall_32+0x2f/0x70 [ 3306.817668][T30894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3306.824009][T30894] RIP: 0023:0xf7fea549 [ 3306.828096][T30894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3306.847724][T30894] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 3306.856167][T30894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001440 [ 3306.864154][T30894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3306.872140][T30894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3306.880120][T30894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3306.888190][T30894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3306.896196][T30894] [ 3306.898534][T30894] Allocated by task 30894: [ 3306.902964][T30894] kasan_save_stack+0x1b/0x40 [ 3306.907661][T30894] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 3306.913383][T30894] kvmalloc_node+0x61/0xf0 [ 3306.917815][T30894] xfrm_user_rcv_msg_compat+0x3cd/0x1040 [ 3306.923460][T30894] xfrm_user_rcv_msg+0x55b/0x8b0 [ 3306.928397][T30894] netlink_rcv_skb+0x153/0x420 [ 3306.933151][T30894] xfrm_netlink_rcv+0x6b/0x90 [ 3306.937827][T30894] netlink_unicast+0x533/0x7d0 [ 3306.942610][T30894] netlink_sendmsg+0x856/0xd90 [ 3306.947367][T30894] sock_sendmsg+0xcf/0x120 [ 3306.951784][T30894] ____sys_sendmsg+0x6e8/0x810 [ 3306.956553][T30894] ___sys_sendmsg+0xf3/0x170 [ 3306.961144][T30894] __sys_sendmsg+0xe5/0x1b0 [ 3306.965636][T30894] __do_fast_syscall_32+0x56/0x80 [ 3306.970685][T30894] do_fast_syscall_32+0x2f/0x70 [ 3306.975523][T30894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3306.981836][T30894] [ 3306.984154][T30894] The buggy address belongs to the object at ffff8880256af200 [ 3306.984154][T30894] which belongs to the cache kmalloc-256 of size 256 [ 3306.998197][T30894] The buggy address is located 236 bytes inside of [ 3306.998197][T30894] 256-byte region [ffff8880256af200, ffff8880256af300) [ 3307.011454][T30894] The buggy address belongs to the page: [ 3307.017090][T30894] page:00000000780da746 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x256ae [ 3307.027230][T30894] head:00000000780da746 order:1 compound_mapcount:0 [ 3307.033799][T30894] flags: 0xfff00000010200(slab|head) [ 3307.039073][T30894] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff8880100413c0 [ 3307.047656][T30894] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 3307.056237][T30894] page dumped because: kasan: bad access detected [ 3307.062630][T30894] [ 3307.064940][T30894] Memory state around the buggy address: [ 3307.070597][T30894] ffff8880256af180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3307.078660][T30894] ffff8880256af200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3307.086708][T30894] >ffff8880256af280: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 fc fc [ 3307.094750][T30894] ^ [ 3307.099027][T25110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3307.102203][T30894] ffff8880256af300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3307.118334][T30894] ffff8880256af380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3307.126695][T30894] ================================================================== [ 3307.136321][T30894] Disabling lock debugging due to kernel taint [ 3307.145896][T30894] Kernel panic - not syncing: panic_on_warn set ... [ 3307.155356][T30894] CPU: 1 PID: 30894 Comm: syz-executor.5 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 3307.166157][T30894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3307.176831][T30894] Call Trace: [ 3307.180131][T30894] dump_stack+0x107/0x163 [ 3307.184682][T30894] ? xfrm_attr_cpy32+0xf0/0x1d0 [ 3307.190008][T30894] panic+0x306/0x73d [ 3307.193991][T30894] ? __warn_printk+0xf3/0xf3 [ 3307.198946][T30894] ? preempt_schedule_common+0x59/0xc0 [ 3307.207020][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3307.211988][T30894] ? preempt_schedule_thunk+0x16/0x18 [ 3307.218526][T30894] ? trace_hardirqs_on+0x51/0x1c0 [ 3307.227577][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3307.232553][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3307.237498][T30894] end_report+0x58/0x5e [ 3307.241658][T30894] kasan_report.cold+0xd/0x37 [ 3307.246339][T30894] ? xfrm_attr_cpy32+0x15a/0x1d0 [ 3307.251283][T30894] check_memory_region+0x13d/0x180 [ 3307.257039][T30894] memset+0x20/0x40 [ 3307.264030][T30894] xfrm_attr_cpy32+0x15a/0x1d0 [ 3307.268954][T30894] xfrm_user_rcv_msg_compat+0x76b/0x1040 [ 3307.277051][T30894] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 3307.285563][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3307.291596][T30894] ? security_capable+0x8f/0xc0 [ 3307.297228][T30894] ? xfrm_alloc_compat+0x10d0/0x10d0 [ 3307.303691][T30894] xfrm_user_rcv_msg+0x55b/0x8b0 [ 3307.308639][T30894] ? xfrm_do_migrate+0x800/0x800 [ 3307.316418][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3307.325192][T30894] ? lock_release+0x710/0x710 [ 3307.330174][T30894] ? __local_bh_enable_ip+0x9c/0x110 [ 3307.336093][T30894] ? __mutex_lock+0x626/0x10e0 [ 3307.343468][T30894] netlink_rcv_skb+0x153/0x420 [ 3307.348242][T30894] ? xfrm_do_migrate+0x800/0x800 [ 3307.356313][T30894] ? netlink_ack+0xaa0/0xaa0 [ 3307.361245][T30894] xfrm_netlink_rcv+0x6b/0x90 [ 3307.366945][T30894] netlink_unicast+0x533/0x7d0 [ 3307.371899][T30894] ? netlink_attachskb+0x810/0x810 [ 3307.378216][T30894] ? __phys_addr_symbol+0x2c/0x70 [ 3307.386006][T30894] ? __check_object_size+0x171/0x3f0 [ 3307.394438][T30894] netlink_sendmsg+0x856/0xd90 [ 3307.399929][T30894] ? netlink_unicast+0x7d0/0x7d0 [ 3307.407759][T30894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3307.413047][T30894] ? netlink_unicast+0x7d0/0x7d0 [ 3307.417987][T30894] sock_sendmsg+0xcf/0x120 [ 3307.425474][T30894] ____sys_sendmsg+0x6e8/0x810 [ 3307.430451][T30894] ? kernel_sendmsg+0x50/0x50 [ 3307.436134][T30894] ? do_recvmmsg+0x6c0/0x6c0 [ 3307.442181][T30894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3307.448903][T30894] ___sys_sendmsg+0xf3/0x170 [ 3307.457873][T30894] ? sendmsg_copy_msghdr+0x160/0x160 [ 3307.466310][T30894] ? __fget_files+0x272/0x400 [ 3307.471215][T30894] ? lock_downgrade+0x6d0/0x6d0 [ 3307.476946][T30894] ? find_held_lock+0x2d/0x110 [ 3307.481839][T30894] ? __fget_files+0x294/0x400 [ 3307.487720][T30894] ? __fget_light+0xea/0x280 [ 3307.492331][T30894] __sys_sendmsg+0xe5/0x1b0 [ 3307.496846][T30894] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3307.502319][T30894] ? syscall_enter_from_user_mode_prepare+0x13/0x20 [ 3307.511156][T30894] __do_fast_syscall_32+0x56/0x80 [ 3307.516945][T30894] do_fast_syscall_32+0x2f/0x70 [ 3307.524263][T30894] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 3307.532400][T30894] RIP: 0023:0xf7fea549 [ 3307.536505][T30894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3307.556407][T30894] RSP: 002b:00000000f55e40cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 3307.567176][T30894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001440 [ 3307.575758][T30894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3307.585703][T30894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3307.594406][T30894] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3307.603004][T30894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3307.612105][T30894] Kernel Offset: disabled [ 3307.616447][T30894] Rebooting in 86400 seconds..